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December 2001 


The Honourable Daniel Hays 
The Speaker 
The Senate of Canada 


Dear Mr. Hays: 


I have the honour to submit to Parliament my annual report which covers the period 
from April 1, 2000 to March 31, 2001, for the Privacy Act and from January I, 2001 to 


November 30, 2001, for the Personal Information Protection and Electronic Documents Act. 


The timing of this year’s report is exceptional. I had decided to submit the report in early 
autumn this year rather than in the spring as usual, for two reasons: first, having taken up my 
position in September 2000, I wanted a sufficient time frame of experience on which to report; 
and, second, with the Personal Information Protection and Electronic Documents Act having 
come into effect on January 1, 2001, I wanted the report to encompass a reasonable amount of 
experience with the new legislation. Then the events of September 11, and the privacy issues 
arising from their aftermath, necessitated waiting until now. The normal reporting schedule of 


my Office will be resumed with a report next spring. 


Yours sincerely, 


George Radwanski 


Privacy Commissioner of Canada 
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The Speaker 
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Dear Mr. Milliken: 


I have the honour to submit to Parliament my annual report which covers the period 
from April 1, 2000 to March 31, 2001, for the Privacy Act and from January I, 2001 to 


November 30, 2001, for the Personal Information Protection and Electronic Documents Act. 


The timing of this year’s report is exceptional. I had decided to submit the report in early 
autumn this year rather than in the spring as usual, for two reasons: first, having taken up my 
position in September 2000, I wanted a sufficient time frame of experience on which to report; 
and, second, with the Personal Information Protection and Electronic Documents Act having 
come into effect on January 1, 2001, I wanted the report to encompass a reasonable amount of 
experience with the new legislation. Then the events of September 11, and the privacy issues 
arising from their aftermath, necessitated waiting until now. The normal reporting schedule of 


my Office will be resumed with a report next spring. 


Yours sincerely, 


George Radwanski 


Privacy Commissioner of Canada 
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HIS IS MY FIRST REPORT 

to Canadians as Privacy 

Commissioner. It’s a welcome 
opportunity to look back and take 
stock of the past year. In just that 
short time, weve seen extraordinary 
developments, both technological 
and social, with unprecedented 
impacts on privacy. And for me 
personally, it’s been a remarkable 
year, a voyage of discovery. 


I am heartened by the fact that during my 
brief tenure to date, there have already been 
several significant victories for the privacy 


rights of Canadians: 


m The federal government's anti-terrorism 
legislation has been amended to ensure 
that it encroaches on privacy rights only 
to the absolute minimum necessary to 
meet legitimate security objectives. As 
originally drafted, the legislation contained 
provisions that went far beyond their stated 
objectives. They would have given the 
Attorney General the discretion to deprive 


Canadians of all privacy protection, by 


COMMISSIONER S 
OvERVIEW 


issuing blanket certificates that could 
effectively have abrogated the Privacy Act 
and the Personal Information Protection 

and Electronic Documents Act. The Minister 
of Justice accepted my representations and 
introduced amendments that fully met 


my concerns. 


George Radwanski 


Privacy Commissioner of Canada 


The opening of mail from abroad by 
customs officers of the Canada Customs 
and Revenue Agency, on behalf of 
Citizenship and Immigration Canada, has 
been restricted to make it much more 
respectful of privacy rights. The previous 
practice, based on an arbitrary and 
outdated weight-based distinction in the 
Customs Act between mail and parcels, was 
perfectly legal — but it was deeply wrong in 
terms of privacy. When letter mail was sent 
in the large courier-type envelopes required 
by premium delivery services, this alone 
made it heavy enough to lose the exemp- 
tion intended to protect the mail of 
Canadians from being opened without a 
warrant. Following my discussions with the 
Minister of National Revenue, he caused 
the agency to revise its procedures so that 


the spirit of the law is respected. The outer 
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envelopes no longer count toward the 
weight used to distinguish between mail 
that is entitled to privacy protection, 


and parcels. 


= Deeply flawed provincial “health privacy” 
legislation in Ontario, which in fact would 
have given the Ontario government carte 
blanche to violate health privacy rights, 
did not go forward. Because our privacy is 
indivisible — it cannot be respected feder- 
ally and violated provincially — I accepted 
an invitation to testify about the proposed 
law before a committee of the Legislature. 
Unlike other witnesses who recommended 
amendments, I suggested that this bill was 
so fundamentally defective in approach 
that it would be best to withdraw it and 
start from scratch. The bill was allowed 
to die on the order paper. I am hopeful 
that its eventual successor will be more 


genuinely aimed at protecting privacy. 


These developments give me confidence that 
the structure of Canadian privacy law, based 
on an Officer of Parliament/ombudsman with 
a mandate to oversee the privacy rights of 
Canadians, is a sound and effective one. With 
sufficient public support, which depends on 
presenting the facts cogently and persuasively, 
much good can be accomplished and much 


harm can be averted. 


I came to this position determined to be an 
effective champion for the privacy rights of 


all Canadians. To achieve this, I deemed it 


necessary both to reinvigorate the Office of 
the Privacy Commissioner and to greatly 
increase awareness among Canadians about 


the privacy issues that affect their lives. 


Accordingly, this Office has nearly doubled 

in size over the past year. When I joined in 
September 2000 we had 54 people on staff; 

as of November 30 of this year, our staff had 
grown to a total of 84 (97 including our cor- 
porate services). This was done for two reasons: 
to meet our new oversight responsibilities 
under the Personal Information Protection and 
Electronic Documents (PIPED) Act which came 
into effect in January 2001, and to create a 
new communications branch which is the key 
to raising the profile of the fundamental right 


of privacy. 


Public awareness is indispensable to the effective 
carrying out of my role. As an ombudsman, I 
basically have two instruments at my disposal: 
persuasion and publicity. And, of course, 
persuasiveness is greatly enhanced if it is 
backed, whenever necessary, by the support 


of informed, alert public opinion. 


Canadians need to know and understand 
their privacy rights, and to demand that they 
be fully respected. That is why, since taking 
office, I have placed great emphasis on my 
responsibilities as a communicator. I have to 
date delivered 35 speeches to diverse audiences 
across Canada, and given more than 210 


media interviews. 


Of course, I was aware before I was appointed 
that privacy is an important issue. I recognized 
it as a critical element of a free society, and 
agreed with former Supreme Court Justice 
LaForest that it was “at the heart of liberty 

in a modern state.” And the argument that 
privacy is the right from which all freedoms 
flow — freedom of speech, freedom of associa- 
tion, freedom of conscience, to name just 


three — struck me as a powerful one. 


But it didn’t take me long in this position to 
see that privacy was even more important, and 


its protection more urgent, than I had realized. 


This is a critical time to be Privacy Commis- 
sioner. Privacy is threatened as it’s never been 
before. The alarm about “the end of privacy” 
has been sounded often enough in the past. 

But it’s a sad fact that this alarm was easy for 


people to dismiss as exaggerated. 


A reasonably informed person cannot 

dismiss it anymore. The technological means 
to eradicate privacy clearly now exist — not 
only computers and information processing 
technology, but also a panoply of technologi- 
cal wizardry from video cameras to facial 
recognition software to “smart” identification 
cards. And the motives exist — not necessarily 
nefarious motives. Indeed, the greatest threats 
to privacy often come not from those who 
want to do harm, but from those who argue 
quite convincingly that privacy must be sacri- 


ficed on the altar of some greater good. 
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PRIVACY IS THREATENED AS IT’S NEVER BEEN BEFORE. 


Most of us can now easily envisage a world 
without privacy — not just envision it, but 
consider it possible and imminent, in a future 
that we will all live to see. We don't need a 
George Orwell to say, “Imagine what this 
would be like.” It’s beginning to happen all 


around us. 


We're all confronted now with the real 
possibility of having to go through life with 
someone looking over our shoulder, either 
metaphorically or quite literally. We face the 
real and imminent prospect of having to live 
our lives weighing every action, every pur- 
chase, every statement, every human contact, 
wondering who might find out about it, 
judge it, misconstrue it, or somehow use it to 


our detriment. 


That’s not freedom. That, on the contrary, is 
a distinguishing characteristic of totalitarian 


societies. 


Yet I remain concerned that many Canadians 
are watching but not seeing the assault on 
privacy. Their attention becomes focused only 
when their own privacy has already been 
violated — and by then it’s too late. A person's 
privacy, once violated, can never fully be 
restored. If personal information about any 
one of us becomes known by someone who 
has no business knowing it, there is no way to 


retroactively make it unknown. 


IF.WE REACT 
TO TERRORISM 
BY EXCESSIVELY 
AND 
UNNECESSARILY 
DEPRIVING 
OURSELVES OF 
PRIVACY AND 
THE FREEDOMS 
THAT FLOW 
FROM IT, 
TERRORISM 
WILL HAVE 
WON A GREAT 
AND TERRIBLE 
VICTORY, 


THEN 
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The pressures on privacy rights have, of 
course, become even more acute in the wake 
of the September 11 terrorist attacks. In a 
climate of fear and uncertainty, it can become 
all too easy to believe that the more the state 
knows about everyone, the safer we will all 
be. That, in turn, can give an unwarranted 
new aura of legitimacy to what are precisely 
some of the greatest threats to privacy — for 
instance, proliferating video surveillance, 
widespread use of biometric recognition 


technology, or national ID cards. 


These pressures are further intensified by the 
fact that a climate of fear not only invites 
invasions of privacy, it also tends to discourage 
or penalize dissent. In the face of the destruc- 
tion wrought by the terrorists, anyone arguing 
against any measure that has even the vaguest 
appearance of enhancing security must accept 


the risk of being accused of irresponsibility. 


And yet the world has always been a danger- 
ous place, and the evolution of fundamental 
rights such as privacy should teach us that 
their greatest value lies in their ability to 
endure and protect us in times of the worst 
adversity. When there is no great incentive to 
violate a right, it is not so much a right as a 
fact of life. It is only when the temptation to 
pursue some goal by brushing everything else 
aside comes closest to being irresistible, that 
our society's commitment to protecting fun- 


damental human rights is truly tested. 


Privacy and the other cherished freedoms and 
values that define Canadian society are not 
frills or luxuries in the situation we face since 
September 11. They are what this situation is 
all about. If we react to terrorism by excessively 
and unnecessarily depriving ourselves of 
privacy and the freedoms that flow from it, 
then terrorism will have won a great and 


terrible victory. 


By all accounts, the goal of the terrorist 
campaign now underway is to attack and 
undermine the whole nature of American 
society, and by extension of all democratic 
societies. That makes our freedoms and values, 
very much including privacy, the central target. 
Far from making us safer, every ill-considered 
reduction of those freedoms — every needless 
encroachment on privacy — would be a proof 
that terrorism works and thus an incentive for 


further mayhem. 


My responsibility as Privacy Commissioner is 
to do everything in my power to help ensure 
that the fundamental human right, and fun- 
damental Canadian value, of privacy does not 


in fact fall victim to terrorism. 


In discharging this responsibility, I don’t argue 
that privacy is an absolute right, or even that 
there is no need for privacy-invasive measures 
to meet the kinds of security threats that we're 


now facing. 


But it is my duty to insist that the choices 
about any such measures must always be 
made calmly, carefully, and case by case, 

and they must be justified according to clear 
criteria. I have suggested that the following 
criteria are appropriate, for government and 


the private sector alike: 


m Any proposed measure to limit or infringe 
privacy must be demonstrably necessary to 


address a specific problem. 


m It must be likely to be effective in address- 
ing that problem — in other words, it must 
be demonstrable that the measure will 


make us safer, not just make us feel safer. 


m The degree of intrusion or limitation of 
privacy must be proportional to the secu- 
rity benefit to be derived. It mustn't be a 


sledgehammer used to kill a fly. 


m Finally, it must be demonstrable that there 
is no less privacy intrusive measure that 


would achieve the same result. 


Though it went through some initial growing 
pains, the federal government's legislative 
response to the threat of terrorism is at present, 
in my view, one that satisfactorily meets these 
tests with regard to privacy rights. I believe 
that the new Anti-Terrorism Act now strikes 

a reasonable and careful balance between 
security and privacy. I am continuing to put 
forward my concerns and recommendations 


with regard to subsequent legislation. 
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Still, there will undoubtedly be further chal- 
lenges and threats to privacy in the months 
ahead, in the continuing aftermath of 
September 11. The choices we make will be 


of momentous importance. 


In the days and weeks following the attacks, 
the general public got a good look at what 
privacy advocates have long been worrying 
about. They saw that there is a huge industry 
eager to manufacture and sell the technology 
of surveillance: video cameras, facial recogni- 
tion systems, fingerprint readers, e-mail and 
Web monitoring, “smart” identification cards, 
location tracking. And they saw how many 
people are eager to argue that if you don’t 
have anything to hide, you shouldn't mind 


revealing everything. 


Over the past year, long before the tragic 
events of September 1, I have increasingly 
become convinced that privacy will be the 
defining issue of this new decade. That is a 
message I have repeated forcefully in my 
public appearances. Until recently, what I 
meant was that we are facing unprecedented 
and irrevocable choices with regard to privacy 
because of advances in technology and science, 
and those choices will determine the quality 


of our lives. 
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That remains true. But now more than ever, 
privacy will be the defining issue, because the 
choices we make about the balance between 
security and privacy will determine what kind 
of society we leave for our children and grand- 
children. Even an Orwellian society devoid of 
privacy wouldnt be entirely secure — the most 
oppressive police state is still not immune to 
terrorism — but gradually depriving ourselves 
of our privacy rights in the name of safety 
would strip our lives of the dignity and free- 


dom that are the hallmarks of our society. 


We will inevitably see this in retrospect as the 
decade in which we had our chance to take a 
stand in asserting the crucial value of privacy 
and defending it against its assailants. I very 
much hope we will be able to recall it as the 
decade in which we seized that chance and 


took that stand. 


Most people used to define privacy using 
some variant of the famous formulation of 
Samuel Warren and Louis D. Brandeis, as 
“the right to be let alone.” That’s still a useful 
definition, and it certainly captures the visceral 
sense that people have of the importance 


of privacy. 


I prefer a more modern and refined definition 
of privacy as the right to control access to 
one’s person and information about oneself. 
This definition better captures the nature of 
modern threats to privacy, which take place 
chiefly in the context of the collection and use 


of information about us. 


That's why I've said so often in the past 

year that we're at a crossroads. The means by 
which we protected privacy in the past, or 
rather the means by which we could leave it to 
take care of itself, don’t work well anymore, 
and they will work less and less well as time 


goes on. 


Privacy used to be protected pretty much 

by default. When information about us was 
in paper records and scattered over many 
locations, compiling a detailed dossier on any 
individual was a daunting task. Unless you 
were famous, important or suspected of a 
grave offence, your privacy could be relatively 
safe without your having to make much effort 


to ensure it. 


The move to electronic record-keeping has 
changed all that, eating away at the barriers of 
time, distance, and cost that once guarded 
our privacy. New surveillance technologies — 
cookies and Web bugs, video cameras, e-mail 
monitoring, smart cards, biometric identifiers, 
location tracking, drug testing — assail us 
wherever we turn. Strangers sitting at com- 
puter keyboards compile dossiers on us in 
seconds. Our activities and our interests, our 
purchases and our movements, our opinions 
and our habits are dutifully recorded, analyzed, 
and classified, for whatever use the highest 


bidder can dream up for them. 


With the default protection vanishing, it’s up 


ORCS? 


PRIVACY HAS TO BE SEEN, 
THAT HAS TO GIVE WAY BEFORE GREATER SOCIAL NEEDS, 
THE SHARED, 


As I mentioned earlier, one of the most inter- 
esting things I have observed in the past year 
is that the greatest threats to privacy seldom 


come from those who want to do harm. 


They come from well-intentioned people 
who say that privacy needs to be sacrificed for 
some greater good — improved customer 
service, prevention of crime, the advancement 
of science, more efficient delivery of govern- 


ment programs, security. 


Of course, sometimes privacy does have to 


yield to other social interests. 


But we need to ask ourselves — and ask those 
well-intentioned people — what kind of society 
we would be serving, building, and promoting, 
if the destruction of privacy were too readily 


the price to be paid. 


Privacy has to be seen, not as a selfish individual 
interest that has to give way before greater 
social needs, but as the shared, collective, 


social interest that it is. 


That’s why it’s an important time to be 


Privacy Commissioner. 


It’s also an important time to have a new 
private sector privacy law. For almost 20 years, 
we've had legislation controlling the way the 
government collects and handles the personal 
information of Canadians. It’s in the private 
sector that we are seeing the greatest explosion 


in collection of information and compilation 
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NOT AS A SELFISH INDIVIDUAL INTERSST 
BUT AS 


COLEBCTIVE? SOCTALEINTERESI iRATeIT4[s. 


of dossiers about us. It’s there that it’s 
most urgent that we assert control over our 


personal information. 


Parliament passed the Personal Information 
Protection and Electronic Documents Act almost 
two years ago, and it began coming into 

effect on January 1“ of this year. This Act is an 
important tool for Canadians to reassert con- 
trol over their personal information, and to 


take a stand to protect and preserve privacy. 


The Act applies to personal information 
collected, used, or disclosed in the course of 
commercial activities. At its heart is a model 
code for the protection of personal information, 
which was developed jointly by business, 
government, and consumer groups. The 

code is based on widely accepted principles 

of fair information practices, including those 
set out by the Organisation for Economic 


Cooperation and Development in 1980. 
What the Act says, in a nutshell, is this: 


m Apart from some very limited exceptions, 
no private sector organization can collect, 
use or disclose personal information about 


you without your consent. 


mw Itcan collect, use or disclose that informa- 
tion only for the purpose for which you 


gave consent. 
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m Even with consent, it can only collect 
information that a reasonable person 
would consider appropriate under the 


circumstances. 


m People have the right to see the personal 
information that is held about them, and 


to correct any inaccuracies. 


m There is oversight, through me and my 
office, to ensure that the law is respected. 
And there is redress if people's rights 


are violated. 


The Act is coming into effect in stages. It 
has applied since January of this year to 
personal information, other than health 
information, of customers or employees of 
works, undertakings, or businesses under 
federal jurisdiction — principally banks, 
telecommunications, broadcasting, and inter- 
provincial or international transportation, 

as well as in the Northwest Territories, Yukon 
and Nunavut, where it applies to the whole 
private sector, which, under the constitution, 


is federally regulated. 


It also applies to personal information — 
again, other than health information — when 
its disclosed across provincial or national 
boundaries for consideration. “Disclosed for 
consideration” is legalese meaning that you get 
something in exchange for it — for exam ple, 
through sale, lease, or barter. The personal 
information itself must be the subject of the 


exchange for the Act to apply. 


The exclusion of personal health information 
was a last-minute compromise, and it’s 


temporary. 


When the law was working its way through 
Parliament, representatives from the health 
care sector expressed two distinct, opposite 
sets of concerns. Some wanted a tougher law, 
with stronger consent provisions and restrictions 
on subsequent uses of personal health infor- 
mation. Others argued that the law would 
constrain operational activities in health care, 


and wanted it to be more permissive. 


But there weren't any fundamental problems 
or obstacles to overcome. Everyone recognized 
that personal health information had to be 
protected. Neither then, nor at any time since, 
has anyone produced specific, clear indica- 
tions why the law as written cannot work 
satisfactorily. In fact, as then-Deputy Minister 
of Health David Dodge testified before a 


Senate committee: 


“T have been asking for about six months 
for some specific examples of things that 
would really go wrong if the bill comes 
into effect, as indicated, in a year’s time. I 
have been pressing to determine what 
things would actually fall down, what we 
really could not do. Frankly, I have been 
surprised that despite the general criticism 
and uncertainty I have not been given 
examples of things that would go wrong. 


There is an unease and uncertainty because 
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PERSONAL HEALTH INFORMATION — INFORMATION ABOUT THE STATE OF QUR 


OWN BODIES AND MINDS —- 


we are into new territory. However, I have 
not had examples of things that would 


actually go wrong.” 


It was eventually agreed that health informa- 
tion would be excluded from coverage under 
the Act for one year after its coming into force. 
This was to give the health sector additional 


time to adapt to the new law. 


In recent months, there has been a deter- 
mined lobbying effort by various powerful 
health sector interests to continue depriving 
Canadians of the health privacy protection 
they were promised would come into effect on 
January 1, 2002. Some have been pressing for 
an extension of the exemption or carve-out for 
personal health information. Others would 
like to see the law tinkered with in a variety of 
possible ways, including a separate regulatory 
regime that would bypass the provisions of 
the Act and truncate the oversight role of the 


Privacy Commissioner. 


But two things have remained constant over 
the past year. First, there is still no substantive 
consensus, with some still arguing for a 
stronger law and others for a weakened one. 
And, second, no one has yet demonstrated 
specifically and persuasively what is wrong 


with the law as written. 


Any delay or dilution of the health privacy 
protection that Canadians have been promised 
by Parliament would, in my view, be a great 


blow to privacy rights. 


IS ARGUABLY THE MOST PRIVATE INFORMATION OF ALL, 


Personal health information — information 
about the state of our own bodies and minds 
— is arguably the most private information of 
all. Any inappropriate disclosure can have dey- 
astating consequences. Indeed, fear of losing 
control over their health information can deter 
people from seeking medical care at all, with 
detrimental results not only for them but also 
for society as a whole. That's why any privacy 
protection legislation that does not fully 
protect personal health information is scarcely 
worthy of the name. The one-year delay in 


this regard was more than long enough. 


An even greater concern would be the effect 
that any delay or tampering with regard to 
health privacy protection could have on the 
effectiveness of the PIPED Actas a whole. 
People in the health field may argue that 
their sector has special and distinct privacy 
issues. But people in banking, transportation, 
telecommunications — indeed, any sector 

of the economy — could easily make the 


same argument. 


That is why the law was drafted in terms of 
relatively broad principles and rules, with 
ample room for flexibility and interpretation 
in its application. If special exceptions were to 
be made for one sector such as health, every 
other sector could likewise start demanding 
individualized treatment and the whole 
edifice of the privacy law would be at risk 


of crumbling. 
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I am therefore very pleased that the Minister 
of Health, Hon. Allan Rock, confirmed to me 


in a letter dated September 24: 


“I do not support the creation of a separate 
regulatory agency to deal with personal 
health information under PIPEDA. The 
Act, as passed by Parliament just over one 
year ago, is clear that oversight, redress and 
audit responsibilities rest with the Privacy 
Commissioner. The Deputy Minister has 
also made it clear to stakeholders in the 
Health sector that we are not contemplating 
amendments to PIPEDA to create a 
separate Agency for the health sector, nor 
do we support a delay in the application 

of PIPEDA to the health sector.” 


I very much appreciate this recognition by 
the Minister of Health, on behalf of his 
department, of the vital importance of having 
health privacy protection come into effect as 


scheduled on January 1, 2002. 


At the time of writing of this report, it does 
indeed appear that the Act will apply as 
written. On January 1, 2002, the personal 
health information held by federal works, 
undertakings and businesses about their 


customers or employees will be protected. 


The sale or barter of personal health informa- 
tion across national or provincial borders 
will also be covered. Disclosures of personal 


health information across any borders for 
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consideration (where the consideration is for 
the information) will be covered. And all 
businesses and organizations in Yukon, the 
Northwest Territories and Nunavut that col- 
lect, use, or disclose personal information in 
the course of commercial activities will have 


to protect personal health information as well. 


It is important to note that the health care 
sector will still have another two years to 
prepare for the coming into effect of the Act 
in the areas that are presumably of greatest 
concern to it. That’s because the Act will not 
apply to such directly health-related commer- 
cial services as doctors’ offices, private clinics, 
laboratories and pharmacies until January 1, 
2004, when it extends to all private-sector 
commercial activities within provinces, except 
where a province has passed substantially 


similar legislation. 


There is, however, one issue that I consider 


appropriate to address at this time. 


I know that members of the health commu- 
nity are understandably concerned about the 
possible impact of the Act on health research, 
since it involves personal health information 
and pecuniary considerations are not always 
absent. I want at this time to provide assur- 
ance that bona fide health research, carried 
out with appropriate sensitivity to the privacy 
rights of Canadians, has nothing to fear from 
the Act or my Office. 


My position on this important issue will be 


as follows: 


Personal health information is perhaps the 
most privacy-sensitive of all personal informa- 
tion, and as a general rule individuals must 
have the right to control who can collect, 

use or disclose this information, and for what 
purpose. At the same time, however, our 
society has a vital interest in the continuation 
and development of health research, which 


holds the promise of great benefits for all 
individuals. 


The Purpose clause of the Act specifies that 
its rules are intended to balance “the right of 
privacy of individuals with respect to their 
personal information and the need of organi- 
zations to collect, use or disclose personal 
information for purposes that a reasonable 
person would consider appropriate in 


the circumstances.” 


In the case of health research, it appears clear 
to me that the appropriate balance is one that 
safeguards the genuine privacy interests of 
individuals while permitting the conduct of 
legitimate health research that uses informa- 
tion in ways that can have no possible impact 
on the individuals to whom it pertains. I 

do not believe that the Act was in any way 
intended to deter or impede such research, 
and my provincial and territorial counterparts 
with whom I discussed the issue this summer 


share this view. 
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Accordingly, I intend to interpret broadly the 
intent of paragraph 7(2)(c) of the Acz, which 
permits an organization to use personal infor- 
mation without the knowledge or consent of 
the individual if “it is used for statistical, or 
scholarly study or research, purposes that 
cannot be achieved without using the infor- 
mation, the information is used in a manner 
that will ensure its confidentiality, it is 
impracticable to obtain consent and the 
organization informs the Commissioner of 
the use before the information is used.” 
Paragraph 7(3)(f) makes a similar provision 
for the disclosure of personal information 


without knowledge or consent. 


I will take the view that bona fide health 
research carried out by duly accredited organ- 
izations under appropriate safeguards does in 
fact constitute statistical or scholarly study or 
research, whether or not there is an element 
of pecuniary interest involved. Merely because 
research into a particular medical condition 
may receive funding assistance from an 
outside source that hopes to reap financial 
benefit from the discovery of an effective new 
medication, for example, does not, I believe, 
change its legitimacy as health research from 


the point of view of privacy rights. 


With regard to the impracticability of 
obtaining consent for such research, I accept 
the view of the health research community 
that cost factors and/or the difficulty of 


obtaining consent from 100 per cent of a 
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target population make it impracticable to 
obtain individual consent for many health 


research studies. 


The Act requires that the information in 
question must be used in a manner that will 
ensure its confidentiality. I consider this 


requirement to be of paramount importance. 


I will accordingly take the position that per- 
sonal health information can be disclosed and 
used without consent for health research as 
described above, but only provided that it 
remains strictly within the confines of the 
research project and that it can in no way 


harm the individual to whom it pertains. 


Without limiting the generality of the forego- 
ing, I will consider it an absolute requirement 
that personal health information disclosed 
and used without consent for health research 
purposes can under no circumstances 
whatsoever find its way to the individual’s 
employers, insurers, relatives or acquaintances, 
governmental or law enforcement authorities, 
marketers or any other third parties, nor can 
the individual be contacted as a result of this 
information by anyone other than his or her 
own physician or other primary health care 


provider, as the case may be. 


I and my Office will maintain vigilant 
oversight over this requirement, and any 
breach of it would be considered, ipso facto, 


an extremely grave violation of the Act. 
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I am convinced that this approach will fully 
meet the intent of the Act, effectively protect 
the privacy rights of Canadians, and permit 
all legitimate health research to proceed with- 


out impediment. 


The final stage for implementation of the Act 
will be in January 2004. At that time, it will 
extend to all commercial activities in Canada, 
with one important exception: where a 
province has passed substantially similar pri- 
vacy legislation, the federal government may 
exempt organizations and activities in the 
province from the application of the federal 


legislation, and the provincial law will apply. 


Federally regulated businesses in those 
provinces will continue to be governed by 
the federal Act. So will personal information 
in all interprovincial and international 
transactions by organizations in the course 


of commercial activities. 


In short, soon we will have seamless privacy 
protection in Canada. All of the private sector 
will be required to comply with the federal 


law or a substantially similar provincial one. 


One of the points about the new private sector 
legislation that I have made frequently this 
past year, especially to business audiences, is 
that it doesn’t set Canada apart from the rest 
of the world. Similar legislation is found in 
most economically advanced countries world- 
wide, with the only significant exception 


being the U.S. Even there, the debate is less 


I DECIDED AT THE OUTSET TO PUT A SPECIAL EMPHASIS ON COMMUNICATIONS. 


about the principles than about the best 


means of observing them. 


One of the reasons that this kind of legislation 
is being adopted is that when one country has 
it, it can only fully protect its citizens’ infor- 
mation if the countries with which it trades 
have similar protections. To promote a better 
understanding of how we protect privacy in 
Canada, I have spoken and participated in 
conferences in Washington, at Harvard 
University, and in Brussels, Cambridge, and 
London, and I’ve engaged in dialogue with 
privacy and data protection commissioners 


from around the world. 


When I was appointed as Privacy Commis- 
sioner, I looked at the situation we were facing: 
multiple threats to privacy in the name of 
reasonable social objectives, ever-diminishing 
expectations of privacy, a complex new law, 
and a public that, to some degree, seemed so 
accustomed to having its privacy whittled 
away that it was in danger of losing sight of 


privacy’s meaning and importance. 


Faced with all that, I decided at the outset to 


put a special emphasis on communications. 


One of my first acts as Privacy Commissioner 
was to establish a new Communications and 
Strategic Analysis Branch in my Office, with 
responsibilities for researching privacy issues 
and reaching out to the public, to inform 
them and to get their views. And I personally 
have seized all available opportunities to 


spread the word, criss-crossing the country, to 
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address conferences and meetings and give 


interviews to the media. 


I have also ensured that the public can get 
accurate, current information from our Web 
site — for example, my speeches are available 
there as soon as I deliver them — and in pub- 
lished form. We've made available information 
packages on a variety of subjects including 
identity theft, the census, and, of course, how 
to access personal information and assert your 
rights under Canada’s privacy laws. We've also 
published extensive guides for individuals 
and businesses on the new Act and how it will 


affect them. 


I do this because it is profoundly important 
for Canadians to know their rights and to 
understand the implications of losing their 
privacy. And the simple truth is that I rely on 
public support in my role as an ombudsman, 
which is the primary way I protect Canadians’ 
rights under the Privacy Act and the Personal 
Information Protection and Electronic 


Documents Act. 


I do not have formal powers to force govern- 
ment institutions and private sector companies 
to respect people’s privacy, or to make amends 
when they have failed to do so. I can go to the 
courts in certain instances, of course, but that’s 
never an optimal solution. What I rely on is 
the power of public opinion. Few people, in 
government or in business, want to incur the 
public’s wrath. The better informed the public 


is, the more its opinion will be respected. 
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I want to come back now, as I said I would, to 
some of the specific privacy issues that have 


preoccupied me this year. 


Surveillance — actual visual surveillance — 
has long been a central concern of privacy 
advocates. The past year saw an upsurge in 
surveillance activities, by governments and 
the private sector, that has pushed this issue 


front and centre. 


Privacy means being able to go about your 
lawful business without your every move 
being scrutinized and monitored. While 
we have to be very mindful of the more 
subtle privacy threats presented by modern 
information collection and management, 
it is imperative that we not lose sight of 
the gross violation of privacy that surveil- 


lance represents. 


Video surveillance is everywhere, in public 
and private spaces. We've become conditioned 
to being watched and recorded when we enter 
a bank or a convenience store, move through 
an airport, or drive through an intersection. 
And now, alarmingly, we are seeing a growing 
inclination to monitor us as we walk on the 


streets of our cities and towns. 


People occupying a public space must reason- 
ably expect to be observed by others. But it’s 


one thing to expose yourself to casual glances, 


or even interested notice, by your fellow citizens. 
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It’s another to find yourself under systematic, 
relentless observation, without cause, by 


agents of the state. 


We haven't yet reached the same point as the 
United Kingdom, with its ever-increasing 
network of video surveillance — some two 
million video cameras, according to a recent 
report, watching streets, parking lots, housing 
developments, and shopping centres. Nor 
have we yet followed the lead of the U.S., 
where there are already instances of random 
video surveillance of public gatherings 
combined with biometric databases, to 
produce an electronic equivalent of the 
police line-up — with everyone required to 
participate, independent of any suspicion 


of wrongdoing. 


But we have seen the installation of video 
surveillance systems aimed at public streets 
in Kelowna, B.C. (the subject of a complaint 
received by this Office), and similar 

systems are being planned for various other 


Canadian cities. 


And biometric face recognition technology, in 
Ontario casinos and at Toronto’s Pearson 
International Airport, also made the headlines 
this year. (In the latter case the headlines 
turned out to be wrong: my investigation 
revealed that the Rcmp was using biometrics 
in a reasonable manner. My account of this is 


in Part One of this report.) 


The rationale for surveillance is always the 
same: it increases security and helps deter 
crime. That’s not something to be dismissed 
lightly. Whether it’s bank robbery or the 
running of red lights, privacy advocates have 
no sympathy for people who hide behind 
privacy as an excuse for wilful violation of 


. 5) 
society's rules and laws. 


But, as someone once said, the only place 
where a police officer’s job is easy is in a police 
state. We cannot let legitimate concerns about 
security override a legitimate concern about 
privacy. If we sweep everyone into the net, if 
everyone is a suspect whose every movement 
can be monitored and perhaps recorded, 
analyzed, and filed away — just in case — we 
may well have done the utmost to prevent 
and control crime. But we will have done it 

at the unacceptable cost of a fundamental 


human right. 


And if the state has no business monitoring 
the law-abiding nation, the private sector 

has even less. Yet, this year, a private security 
company in Yellowknife decided to make 
public surveillance its business, and aimed its 
video cameras onto a downtown street. That 
was enough to trigger a complaint under the 
Personal Information Protection and Electronic 
Documents Act, which applies to all private 
sector activities in the territories. My findings 
are described in Part Two of this report, but 
suffice it to say that I found that this was a 
contravention of the Acz. I think we can all 


take some satisfaction from the fact that this 
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company acted without the support of the 
city’s officials, police force, or the public, and 
stopped conducting the surveillance voluntarily 


when the public reacted negatively. 


What is far more disturbing is the situation 
in Kelowna, B.C. Here the rcp, acting as 
a municipal police force, set up a video 
surveillance camera to continuously monitor 
and record everyone on a public street. 
Investigating a complaint that was made 

to me by the Information and Privacy 
Commissioner of British Columbia, I found 
this activity to be a collection of personal 
information that is in clear contravention of 


the Privacy Act. 


But the remp is still continuing 24-hour 
surveillance through the camera, only without 
continuous recording. This puts it into tech- 
nical compliance with the Privacy Act, which 
defines personal information as information 
about an identifiable individual that is 


“recorded in any form.” 


As I made clear in my finding, I consider this 
sort of video surveillance of public places to 
be an extremely serious violation of privacy 
rights even in the absence of recording. It is 
the very presence of video cameras, whether 
they are recording at any moment or not, 
that creates the privacy-destroying sense of 
being observed. As well, if a proliferation of 
video cameras is allowed to take place, it is 
virtually certain that function creep will lead 


inexorably to the linkage of these cameras 
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with biometric technology. This would even- 
tually make it possible to identify anyone in a 
monitored public place at any time, or to 
monitor the whereabouts and activities of any 
given individual as he or she moves from place 


to place. 


What is crucial to emphasize is that there is 
absolutely no evidence that video surveillance 
actually reduces crime, rather than merely 
displacing it to other locations where there 
are no cameras. In fact, a spokesman for the 
RcMP detachment in Kelowna, Corporal 

Reg Burgess, was reported in The Vancouver 
Sun of June 19, 2001, as stating that such 
cameras “do, in some circumstances, prevent 


crime, but they mostly displace crime.” 


This Vancouver Sun article goes on to report: 
“Burgess added that, by shifting crime away 
from Kelowna’s downtown core into residential 
neighbourhoods, police will be alerted to 


criminal activity more quickly by homeowners.” 


Since my mandate is to oversee privacy laws 
rather than the laws of common sense, it is 
probably beyond my purview to comment on 
this stated Rcmp policy of using video cameras 
to relocate crime from downtowns to residen- 


tial areas. 


However, I met recently with romp Commis- 
sioner Giulliano Zaccardelli and tried my 
utmost to persuade him to demonstrate 
respect for privacy rights by ordering the 


removal of the Kelowna surveillance camera. 
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In a letter dated November 27, 2001, 


Mr. Zaccardelli responded: 


“I am satisfied that in the case of Kelowna, 
the Rcmp is acting within the scope of its 
duty to protect the community based on 
well articulated public safety concerns. 
The use of the cameras will prove to be a 
valuable asset to the community in sup- 
pressing criminal activity and making it a 


safer place to live.” 


I then asked Commissioner Zaccardelli for 
the data on which he bases his conclusion that 
this video surveillance is indeed effective in 
assisting the RCMP in its duty to protect the 
community, and particularly for the evidence 
that the camera in operation since last 
February is in fact “suppressing criminal 
activity’ and is making Kelowna “a safer 
place to live.” Specifically, I asked 
Commissioner Zaccardelli for statistics on 
the number of arrests arising from the use 

of the camera since last February, and for 
statistics comparing the overall crime rate in 
Kelowna during the months the camera has 
been in operation to the crime rate for the 
same period last year. He was not able to 


provide any such information. 


I find this deeply disappointing. One would 
expect the Commissioner of the Rcmp, in 
choosing to reject the strong recommendation 
of an Officer of Parliament on such an 


important matter, to base his decision on the 


CoOMMISSIONER’S OVERVIEW 


I RESPECTFULLY REQUEST THE ASSISTANCE OF MEMBERS OF PARLIAMENT 
AND SENATORS IN SEEKING TO PERSUADE COMMISSIONER ZACCARDELL1 
TO RETHINKOHIS STANCE ON THIS ISSUE. 


clearest factual evidence, not on unsubstanti- 


ated anecdotal conjecture, supposition or 


wishful thinking. 


Even more important, one would expect 
Canada’s highest-ranking police officer, the 
head of our national police force, to want 

his force to be exemplary in setting the 
highest standard of respect for privacy rights. 
It remains my hope that Commissioner 
Zaccardelli will come around to that view. If 
he instead retains his current position on this 
video surveillance, he will regrettably be set- 
ting the diametrically opposite example, to be 


followed by police forces across the country. 


The level and quality of privacy in our country 
risk being struck a crippling, irreparable blow 
if we allow ourselves to become subjected to 
constant, unrelenting surveillance and obser- 
vation through the lens of proliferating video 
cameras controlled by the police or other 


agents of the state. 


For this reason, I respectfully request the 
assistance of Members of Parliament 

and Senators in seeking to persuade 
Commissioner Zaccardelli to rethink his 
stance on this issue. I consider this to be a 


matter of the greatest importance. 


Video surveillance is the most obvious means 
by which we are being watched and monitored 
in public. But there are others. The location 
technology being inserted in cell phones 


can pinpoint a caller’s location to within 


50 metres. Geographical positioning technology 
can be used to locate vehicles. Electronic pay- 
ments systems used on toll roads and bridges 


can be used to track the movement of vehicles. 


So we have moved well beyond the kind of 
exposure that “going out in public” used to 
mean. When we are out in public, we are 

really out in public — nothing, it seems, can 


remain private any longer. 


And, to add to the problem, as the definition 
of what is public and what is private becomes 
blurred, the assault on our public privacy 
extends to domains that we once considered 
unquestionably private. A growing number of 
sensory enhancing technologies — chemical 
sniffers, thermal imaging devices, night vision 
binoculars, sound wave receptors, portable 
x-ray devices — allow what goes on in closed, 
unquestionably private places to “leak” into 
public space. The infamous Kyllo case in the 
U.S., where a marijuana growing operation 
was detected by a thermal imaging device 
that captured heat transmissions from the 
house, shows just how blurred the distinction 


between public and private can be. 


Again, privacy advocates are not advocates of 
crime. We recognize the good intentions of 
those who want to use surveillance to increase 
security. But our society can achieve its legiti- 
mate aims for security and prevention of 
crime without throwing away privacy and the 


fundamental civil liberties that flow from it. 
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DON’T SIGN 
AWAY THEIR 
FUNDAMENTAL 
HUMAN RIGHT 
OF PRIVACY 
WHEN THEY 
ENTER INTO 

AN EMPLOYMENT 
CONTRACT. 
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These privacy invasive technologies must be 
confined to very limited and specific situations 
where the threat to public security is material, 
significant, and imminent, and they must 

be subject to prior judicial authorization — 


warrants, in other words. 


Even the extraordinary growth in generalized 
surveillance of our public selves, by agents of 
the state, pales when we compare it to the 
explosion in surveillance of employees both in 
and away from the workplace. This is an issue 


that is of increasing concern to me. 


As I told a conference in Toronto last April, 
workplace privacy is one of those issues that 
has come to the fore because the default 
protection of privacy no longer does the job. 
Privacy rights in the workplace are ill-defined 


because, until now, they have not had to 


be defined. 


Managers have always wanted to ensure 
productivity and prevent liability. Even 
before Henry Ford and Frederick Taylor 
brought us the production line and “scientific 
management,” managers were monitoring, 
measuring and conducting surveillance of 


their workforces. 


But for a long time technology imposed a 
benign limitation on this. Workers were able 
to maintain a core of privacy in their work — 


just as they can maintain the privacy of their 
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desk drawers, lockers, and personal effects — 
simply because monitoring and recording 


could so easily be overloaded with information. 


That benign limitation began disappearing as 
computers became more common. The dream 
of perfect control and perfect security is, for 
all intents and purposes, achievable in the 
workplace, with technology that allows man- 
agers to monitor everything that moves and 


analyze everything that’s recorded. 


For some, the idea that employees have privacy 
rights in the workplace is unacceptable, since 
they are on the employer's time and property 
and using the employer's equipment. I don’t 
agree. Employees don’t sign away their funda- 
mental human right of privacy when they 
enter into an employment contract. It may 
come as a surprise to some that a considerable 
number of judges and arbitrators agree with 


me on this. 


Nonetheless, we've witnessed an extraordinary 
growth in surveillance in the workplace. 

This is particularly apparent in the U.S., 
where there are few privacy laws to protect 
employees. In January 2001, the American 
Management Association surveyed 1,627 large 
and mid-sized companies and found that 
more than 75 per cent of them videotape 
their employees or monitor their e-mail, 
Internet, phone calls, or computer files. 

This is up nearly ro per cent from a similar 


survey last year. 


CoMMISSIONER’S OVERVIEW 


ELECTRONIC MONITORING SHOULD NEVER BE ALLOWED TO 
SUBSTITUTE FOR — IT CAN’ T SUBSTITUTE FOR — GOOD MANAGEMENT 
AND SUPERVISORY PRACTICES. 


There have been no comparable studies of the _ public because of the potential for one or 


extent of employee surveillance in Canada; some of them to commit a crime. Reasonable 
it’s often simply assumed to reflect the situa- suspicion of wrongdoing should be the only 
tion in the U.S. That may be an incorrect justification for monitoring and surveillance 
assumption, partly based on a failure to of a workforce. Electronic monitoring should 
understand the difference in Canadian laws. never be allowed to substitute for — it can't 


substitute for — good management and super- 
And that failure to understand the difference ; 6 6 P 
; visory practices. If the only way an employer 
in laws is frequent in Canada. For example, ie, 
Rrieras can know whether employees are working is 
employers often cite potential liability for 
to monitor them electronically, there’s some- 
workplace harassment as a reason to conduct omen . 
thing wrong with his management practices. 
surveillance, especially of Internet and e-mail 


use. That reflects U.S. legal doctrine, rather The Personal Information Protection and 

than Canadian. In Canada, anti-discrimination Electronic Documents Act limits collection, 
legislation only imposes liability on an use, and disclosure of information to “purposes 
employer if it has failed to take reasonable that a reasonable person would consider 

steps to prevent harassment. That doesn't appropriate.” That’s an important restriction 
mean wholesale electronic monitoring of on monitoring and surveillance in the work- 
the workforce. It means having a good place. Since the Act, or provincial legislation 


harassment policy, training employees, having very much like it, will be binding on many 
good anti-harassment procedures in place employers throughout the country very soon, 
(such as a harassment co-ordinator and a all employers should be looking at it. 


confidential complaints process), and acting ; en 
; I mentioned earlier the privacy implications 
quickly and effectively if harassment does 
of pressure for open government and access 
occur — or if there is good reason to suspect it. 
to government information. This came to 


The other excuse I hear for wholesale elec- a head this year in the attempt by various 
tronic monitoring is the supposed “potential” _ parties, supported by the Information 
of Internet connections for time-wasting Commissioner, to get access to the agendas 


and misuse of the employer's facilities. 1 don’t of the Prime Minister. 
accept that we should monitor employees 
because of a potential for time-wasting any 


more than we should monitor the law-abiding 
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That the values of openness and access to 
information could be twisted into such an 
attack on privacy — agendas are by their very 
nature private — has been a painful discovery 
for me. I never thought I would have to find 
myself opposing access to information. As a 
former journalist, I am acutely aware of the 
importance of openness in government. As 
an actively involved citizen, I have seen how 
accountability can be enhanced when infor- 


mation is readily available. 


But this unquestionably good thing cannot 
bulldoze everything in its path, or justify a 
violation of individual privacy. Once again, 
privacy has to be asserted in all its societal 
importance, as a fundamental right, so that 
we dont see it as something that can be 
traded away every time someone sees it as an 


impediment to a valid objective. 


Fortunately, I’m not alone in my concern 
about this. The courts have been very clear: 
open government doesnt preclude protecting 
fundamental human rights. Access is an 
administrative right that can enhance democ- 
racy. Privacy is a fundamental human right 


that is the very essence of democracy. 
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Another important issue is Government 
On-Line. The move to a seamless electronic 
interface between the citizenry and various 
levels of government can be an excellent 
development, improving the way programs 
are delivered and making government more 
efficient and accessible. Every Canadian has a 
story to tell about being confused as to which 
department or which level of government is 
responsible for which service. And many 
Canadians know the stories, whether true or 
apocryphal, of the difficulties that can be 
encountered in trying to get information 


from government. 


But the walls between agencies and programs, 
within government and across levels of 
government, are also walls between collections 
of personal information. Government as a 
single, centralized body brings with it the 
prospect of merging databases of information 
about individuals’ interactions with govern- 
ment. That information has been collected 
for specific uses. When it’s held in separate 
databases specifically for those purposes, it’s 


compartmentalized. 


COMMISSIONER’S OVERVIEW 


PRIVACY HAS TO BE BUILT INTO THESE 
GOVERNMENT ON-LINE PROJECTS FROM THE START. 


When those databases are merged, someone 
with a need to know only one piece of infor- 
mation can have access to lots more. And 
information can be combined, to reveal new 
information, leading to detailed profiles of 
individuals, tracking their activities and their 
interaction with government. Combine that 
with the assignment to each Canadian of 

an authentication, identification, and access 
device — what the government is calling 
“e-identities” — and we could find ourselves 
faced with a surveillance society, and the end 


of the right to be let alone. 


Moreover, delivering services or benefits 
electronically will depend on private sector 
involvement. Private sector providers, as 
components of government delivery systems, 
could become repositories of vast databases 
on Canadians. That is cause for concern, 
given the limited protection of privacy in the 
private sector, even with the new private 


sector legislation. 


I’ve addressed many audiences this year on 
this subject, and undertaken a continuing 
process of consultation with the Government 
of Canada. My message is simple enough: 
privacy has to be built into these Government 
On-Line projects from the start. That includes 
doing privacy impact assessments, and con- 
sulting with privacy protection agencies at the 
design stage — not late in the process, when 


the privacy problems are already locked in. 


Again, I am not questioning the motives of 
the people behind these initiatives. I have 

no doubt that their intentions are the best. 
Efficiency is a worthwhile aspiration. But, as I 
have emphasized repeatedly, efficiency has to 
be properly understood, as a relation between 
means and ends — choosing the best means 
of achieving defined goals. What's critical is 
how we define the goals. For government, 
and for society, those goals have to include 


the preservation and protection of privacy. 


Earlier, I touched on the issue of the privacy 
of health information. It is difficult to empha- 


size its importance enough. 


Governments at both the provincial and the 
federal level intend to expand the collection 
and sharing of personal medical information 
and develop a comprehensive health informa- 
tion system. The intent is laudable — to deliver 
a consistent standard of care across the country, 
assessing why people get sick, and determining 


who is using, and abusing, the system and why. 


But the result may be that a person's latest 

medical check-up has a potential audience of 
thousands. And because the state of the health 
care system is such an urgent concern, privacy 
issues could tend to be disregarded, or at least 


given short shrift, in the discussion. 
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Losing control over health information can 
have devastating consequences. Fear of losing 
control may discourage people from seeking 
medical care at all. The prospect of detailed 
psychiatric assessments finding their way into 
an insurance administrator’s or an employer's 
hands, for instance, may be enough to dis- 
suade patients from seeking care. Or they 
may withhold vital information from doctors, 
prejudicing the effectiveness of treatment 
and ultimately wasting the resources of the 


health care system. 


Nearly 87 per cent of doctors in a recent survey 
in the U.S. reported that a patient had asked 
them to keep information out of their records. 
Nearly 78 per cent said they had withheld 
information from their records because of 
privacy concerns. We have to wonder whether 


attitudes are similar here in Canada. 


For the patient, health information is funda- 
mentally personal and sensitive. It needs the 
highest level of protection to ensure that it can 
never be used to the detriment of the individ- 


ual to whom it belongs. 


I remain very concerned about the security 
of sensitive medical information. Storing 
medical records electronically may increase 


the risks of not just a trickle of isolated 
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privacy violations, but a full-scale flood. 
We've all heard about unintended disclosures 
of personal health information and security 


breaches on the Internet. 


Take the recent example of the Eli Lilly 

and Company’s unauthorized disclosure of 
700 e-mail addresses of people taking Prozac. 
Eli Lilly had offered patients taking this drug 
an e-mail reminder service. The privacy 
breach took place when an e-mail, sent out at 
the end of June announcing the end of the 
program, listed all of the e-mail addresses of 
the people who had signed up for the service. 
This simple act created a lot of negative 
publicity for the company and contributed to 
the debate in the United States about the 
difficulty of protecting patient records that 


are stored electronically. 


We also now have examples of hackers gaining 
access to hospital records. Back in December 
2000, The Washington Post reported that a 
Dutch hacker had penetrated the patient 
record system at the University of Washington 
Medical Center in Seattle. The hacker is said 
to have downloaded copies of several thousand 
patient files containing patient names, condi- 
tions, home addresses and Social Security 
numbers. Closer to home, The Vancouver Sun 


reported in August that five pharmacists in 


British Columbia were recently disciplined 
and fined by that province's College of 
Pharmacists for spying on the medication 
records of colleagues, relatives, friends or 


acquaintances. 


So are we, as a society, prepared for the privacy 
and security breaches that may be coming? 
Perhaps, at the very least, we should give 
patients the right to choose whether to have 
their medical records stored electronically. We 
recognize that electronic patient files represent 
great opportunities for quality of care. But 

we should also recognize that they represent a 
challenge from the perspective of patient 
privacy and confidentiality. The opportunities 


cannot be realized if the challenge is not met. 


Indeed, this fact — that the opportunities of 
the future cannot satisfactorily be realized if 
the challenge of safeguarding privacy is not 
met — applies to all the issues with which 

I deal and which I have been addressing in 


this overview. 


COMMISSIONER’S OVERVIEW 


PRIVACY IS NOT AN OPTION, 


OR 


A FRIBL. 


IT IS A FUNDAMENTAL RIGHT. 


Privacy is not an option, or a frill. It is a 
fundamental right. The need to respect that 
right goes to the very heart of all our hopes for 
progress as a society and as individuals. That’s 
because all meaningful progress is ultimately 
about improving the quality of our lives — and 
we must never delude ourselves that we can 
achieve such improvement if we pursue it, in 
any field, at the expense of heedlessly sacrific- 
ing the right to privacy which is so essential to 


our freedom and dignity. 


Combating that delusion wherever it arises, 
and averting that sacrifice whenever someone 
tries to impose it on us, is what the work of 
my Office is all about. In the following sec- 
tions of this report, I will provide an account- 
ing of how we have been discharging our 


responsibilities. 
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INTRODUCTION 


HE Privacy ACT PROTECTS 

individuals’ privacy 

with respect to personal 
information held by federal 


government institutions. 


The Act, which has been in force 
since 1983, governs how federal 
institutions collect, use, disclose and 
dispose of personal information, 
and gives people rights to access and 
request corrections to their personal 
information. It also sets out my 


duties, responsibilities and mandate. 


As Privacy Commissioner, I receive 
and investigate complaints from 
individuals who believe their rights 
under the Act have been violated. 
[also can initiate a complaint 

and investigation myself, in any 
situation where there are reasonable 
grounds to believe the Act has 

been violated. 


ParT ONE 
REPORT ON THE 
Privacy AcT 


First and foremost, I am an ombudsman, and 
whenever possible, complaints are resolved 
through mediation and negotiation. But I also 
have broad powers of investigation under the 
Act. As Privacy Commissioner I can subpoena 
witnesses and compel testimony and enter 
premises to obtain documents and conduct 
interviews. Obstructing one of my investiga- 
tions is an offence under the Act. Although 
the Act does not include the power to order 
compliance with the Privacy Act, I can, 
however, recommend changes to the way 
government institutions handle personal infor- 


mation, based on my investigation findings. 


As well, as Privacy Commissioner, I have a 
mandate to conduct periodic audits of federal 
institutions to determine their compliance 
with the Privacy Act, and again, on the basis 


of my findings I can recommend changes. 


The Act requires me to submit an Annual 
Report to Parliament on the activities of my 
Office in the previous fiscal year. This current 
report covers the period from April 1, 2000, 


to March 31, 2001. 
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INVESTIGATIONS 


My Investigations and Inquiries Branch 
investigates individuals’ complaints under 
section 29 of the Privacy Act (and under 
section 11 of the Personal Information 
Protection and Electronic Documents Act, 


which Pll talk about later in the report). 


Through these investigations, I determine 
whether individuals’ privacy rights have been 
violated or whether they've been properly 
accorded access to their personal information. 
Where people's privacy rights have been 
violated, I look for ways to provide redress 
for them, and prevent violations from 


happening again. 


I have authority under the Act to administer 
oaths, receive evidence, and enter premises 


where appropriate. I can also examine or 


obtain copies of records found in any premises. 


To date, all complaints under the Privacy Act 
have been resolved without our having to use 
these formal investigative powers, because 
voluntary co-operation with investigations has 


been forthcoming. 


The Branch also responds to thousands of 
inquiries from the general public who contact 
my Office for advice and assistance on all 


sorts of privacy-related matters. 
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COMPLAINTS UNDER THE 
Privacy AcrT 


Between April 1, 2000, and March 31, 2001, 
we received a total of 1,713 complaints under 
the Privacy Act. That’s an increase of almost 
10 per cent over the previous year. The type 
of complaints we received conformed to the 
established pattern: 60 per cent of them 
concerned either denial of access to personal 
information or issues of collection, use, disclo- 
sure, and disposal of personal information, 
and the remaining 40 per cent concerned 
failure to respect time limits, where federal 
organizations had not responded to a request 
for disclosure of personal information within 


the 30-day timeframe set out in the Act. 


My staff closed 1,542 investigations, an 
increase of 10 per cent over the previous year. 
Of the cases closed, 339 dealt with issues of 
collection, use, disclosure, or disposal, while 
630 dealt with access matters and 573 with 
time limits. These complaints were concluded 


as follows: 


Not well-founded: 421 
Well-founded: De: 
Well-founded/Resolved: 82 
Resolved: 44 
Settled during the course 

of the investigation: 321 
Discontinued: Al 


Complaints about departments taking longer 

than they should to respond to access requests 
are always troubling — justice delayed is justice 
denied, and the time limits are in the Act for a 


good reason. 


Several federal government institutions stand 
out for particularly often failing to meet the 
prescribed time frames when responding to 
individuals’ requests for access to their per- 
sonal information. These are the Correctional 
Service of Canada, the Department of 
National Defence, the Canada Customs and 
Revenue Agency, and Human Resources 


Development Canada. 


I consider it of great importance that all gov- 
ernment departments and agencies faithfully 
meet the time limit requirements set out in 
the Privacy Act. Respecting the lawful rights 
of Canadians is mandatory, not optional. 
There simply is no excuse for an entity of the 
Government of Canada to be breaking a law 
of Canada, and I intend to keep emphasizing 


this point. 


Correctional Service of Canada 


In the fall of 2000, in view of the number 

of time-limit complaints filed against the 
Correctional Service of Canada, I instructed 
my staff to address the matter with senior Csc 
officials. In February 2001, the Commissioner 
of Corrections agreed to implement measures 
to eliminate the backlog of requests in 


her department. 


Part ONE <~ REPORT ON THE Privacy ACT 


Those measures resulted in an improvement 
in the Correctional Service’s handling of 
access complaints. In March 2001, the 
department had 1,684 active access requests in 
process, of which only about 20 per cent had 
been responded to within the prescribed time 
frame. By August 31, 2001, after an infusion 
of additional staff and overtime, the depart- 
ment managed to reduce the number of open 
requests to so1. Nearly 60 per cent of those 
were responded to within the prescribed time, 


and 30 per cent were overdue by 30 days or less. 


There is no question that this is an improve- 
ment, and in July I ongratulated the 
Commissioner of Corrections for her depart- 
ment’s achievement. The Correctional Service 
is continuing to work to reduce the number 
of outstanding requests and improve its 
response time. But while I am encouraged by 
these developments, they are not cause for 


euphoria. Nothing less would be acceptable. 


Department of National Defence 


Staff of my office began addressing the issue 
of timeliness with officials of the Department 
of National Defence in late 1999. At that 

time the department had approximately 

2,100 outstanding access requests. The great 
majority of these were not processed within 
the prescribed time limit. Under pressure 
from my officials, the department agreed to 
implement measures such as hiring additional 
staff, making overtime available, and restruc- 


turing its internal procedures and organization. 
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These efforts have made some difference. 

As of November 2001, the department had 
reduced the number of outstanding access 
requests to 279. Of these, 136, not quite 

half, were not processed within the prescribed 


time limits. 


Those numbers reflect an improvement, but 
the situation is still unacceptable. I recognize 
that, for the most part, the requests concern 
large files of information pertaining to things 
like police investigations, Boards of Inquiry, 
or harassment complaints. Such complaints 
are difficult to process. But that is a challenge, 


not an excuse. 


Canada Customs and Revenue Agency 


This agency has had significant problems 
responding to access requests in a timely 
fashion. Staff of my office met with repre- 
sentatives of the agency in early 2000, 

just as they had done with the Department 
of National Defence. The agency, just as 
National Defence had done, agreed to take 
measures, such as reorganization and hiring 


new staff, to improve the situation. 


In the two fiscal years preceding this one, my 
office received 81 complaints of failure to 
respect time limits in one year and 127 in the 
next. Almost all (95 per cent in one year, 


99 per cent in the next) were determined to 


be well-founded. 
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This fiscal year, the office received only 
61 time limit complaints, and of those, 


51 were well-founded. 


Although they are better than the previous 
two years, these figures remain high. Again, 
the delays probably reflect the complexity of 
complaints about personal information in 


tax files, but further improvement is needed. 


Human Resources Development Canada 


We received 80 complaints against Human 
Resources Development Canada about failure 
to respect time limits. Of those, 47 — nearly 
60 per cent — concerned access to personal 
information in the Longitudinal Labour Force 
File, the “super file” on Canadians that was 
dismantled last year because of privacy con- 
cerns. That was an exceptional situation, given 
the amount of attention the file received in 
the media and in Parliament, and the great 
volume of access requests the department 

had to deal with. If those exceptional circum- 
stances are subtracted, we are left with 

33 complaints about delays in responding to 
access requests. That number is still too high. 
But given the number of requests that the 
department receives in any year, and given the 
size of this department, the number is small 
enough to suggest that a bit of reorganization 
and extra work should suffice to eliminate it. 


The department needs to do so. 


My Office will continue to monitor time- 
related issues and keep the pressure on for 


continual improvement. 


Part ONE <~ REPorT ON THE Privacy ACT 


DEFINITIONS UNDER THE PrivAcy ACT 


Not Well-founded: A finding that a complaint is not well-founded means that the investigation 
uncovered no evidence to lead me to conclude that the government institution violated the 


complainant's rights under the Privacy Act. 


Well-founded: A finding that a complaint is well-founded means that the government institu- 
tion failed to respect the Privacy Act rights of an individual. This would also be my finding 
in a situation where the government institution refuses to grant access to personal information, 
despite my recommendation that it be released. In such a case, my next step would be to 


seek a review by the Federal Court of Canada. 


Well-founded/Resolved: I will find a complaint to be well-founded/resolved when the 
allegations are substantiated by the investigation and the government institution has agreed 


to take corrective measures to rectify the problem. 


Resolved: Resolved is a formal finding that reflects my role as an ombudsman. It’s for 
those complaints where “well-founded” would be too harsh to fit what essentially is a 
miscommunication or misunderstanding. It means that my Office, after a full and 


thorough investigation, has helped negotiate a solution that satisfies all the parties. 


Settled during the Course of the Investigation: This is not a formal finding but an acceptable 
means to dispose of a complaint when the investigation is completed, and the complainant 
is satisfied with the efforts of my Office and doesn’t wish to pursue the issue any further. 
The complainant retains the right to request a formal finding. When that happens, the 
investigator re-opens the file, and submits a formal report, and I report the findings in a 


letter to the complainant. 


Discontinued: This means that the investigation was terminated before all the allegations were 
fully investigated. A case may be discontinued for any number of reasons — for instance, 
the complainant may no longer be interested in pursuing the matter or cannot be located to 
provide additional information critical to reaching a conclusion. I don’t issue any formal 


finding in discontinued complaints. 
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SUMMARY OF SELECT CASES 
UNDER THE Privacy AcT 


Personal information 
found in DND dumpster 


This case involved files full of personal 
information found in a trash bin outside an 
armoury. The files contained the personal 
information of dozens of Department of 
National Defence (DND) employees, including 
their names, home addresses and telephone 
numbers, dates of birth, medical and dental 
information, security-screening forms, employ- 
ment histories, next-of-kin notification forms, 


performance assessments, and much more. 


This information, if disclosed, could have 
resulted in real harm, and certainly substan- 


tial personal and professional embarrassment. 


The person who found the files, an army 
reservist, reported his discovery to senior 
officers, but no action was taken. He was able 
to retrieve what he described as a small per- 
centage of the files before the garbage bin was 
emptied, as usual, at the local dump. He gave 
the files to my Office and filed a complaint 
alleging that his personal information had 


been disposed of in an improper fashion. 


My investigation established that an office was 
being moved to another floor and, in prepara- 
tion, an order had been given to dispose of 

anything not needed in the new location. The 


office held parallel or “shadow files” outside 
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the room where official DND files were kept. 
Some of the information in these shadow files 
was a duplicate of official files, some was not. 
The files were in plain folders without the 
departmental logo. As they didn’t look impor- 
tant from the outside, no one thought to look 
inside them, and they were simply thrown out 


as trash. 


Mixed in with these plain folders were a 
number of official DND files that included 
Candidate Progress Reports with detailed 


personal information. 


Officials at DND reacted quickly, assuring my 
Office it would implement measures to elimi- 
nate the possibility of another occurrence of 
this nature. The department also agreed to 
reintegrate information found in the retrieved 


files into official departmental files. 


While the use of “shadow files” does not con- 
travene the Privacy Act, I’m very concerned 
about it. My Office repeatedly finds personal 
information held in such files throughout 
federal government departments. Often, the 
information is not disclosed to individuals 
seeking access under the Privacy Act because it 


is not maintained in the “official record.” 


An issue that came up during the course of 
the investigation was the Treasury Board of 
Canada guideline on the disposal of personal 


information. 


This guideline describes three levels of per- 
sonal information. The top level is personal 
information that, if compromised, “would 
cause extremely grave injury.” Below that is a 
level that would cause “serious injury” if the 
information were compromised. The guide- 
line recommends shredding as the method of 


destroying personal information at these levels. 


Below that is what it calls personal information 
of “low” sensitivity. It defines this as personal 
information as that which, if compromised, 


would “cause injury.” 


According to the guideline, personal informa- 
tion of this type can be torn in half and 


disposed of in regular garbage containers. 


I object strenuously to this guideline and its 
casual provisions for disposal of information 
that, by its own admission, could cause injury. 
I don’t accept the distinction it makes between 
“injury” and “serious injury.” Where privacy 
is concerned, any injury is serious. When 


personal information of any kind is to be 


destroyed, it should be shredded. 


Dnp is not the only federal institution follow- 
ing this guideline. My discussions with DND 


security officials on this matter are continuing. 
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Personal information 
destroyed prematurely by HRDC 


My investigation into this complaint found 
Human Resources Development Canada 
(HRDC) in violation of both the Privacy Act 


and its own Policy Manual. 


An Employment Insurance claimant com- 
plained to me that his ability to obtain all the 
information he needed to file an appeal had 
been hampered by HRDc’s destruction of the 
audiotape of the original hearing into his case 


by the Board of Referees. 


Hrpc’s Policy Manual stated that such tapes 
were to be “kept for one year or until such 
time as the case has been heard by (the Office 
of) the Umpire, the Federal Court or the 
Supreme Court, as well, for any re-hearings of 
the Board of Referees, Umpires, etc.” The 
complainant had been granted two Board of 
Referees hearings and had appeared before 
three Umpires (Federal Court judges), but 
had not exhausted all levels of appeal and was 
prepared to take the matter to Federal Court 
and the Supreme Court. Thus, in accordance 
with HRDC’s own policy, the tape should not 


have been destroyed. 


In addition, the Privacy Act and Privacy 
Regulations require government institutions 
to keep personal information used for an 
administrative purpose for a period of at least 
two years, to allow an individual an opportu- 


nity to access it. 
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As a result of my investigation, HRDC agreed 
to amend its Policy Manual to stipulate a 
two-year retention for audiotapes of its Board 
of Referees hearings. It also amended the 
manual to ensure that staff were aware of the 
requirements to keep the personal informa- 
tion for two years beyond hearings at every 
level up to and including the Supreme Court. 
An instruction was sent out to staff and the 
Appeals Division issued an amendment to the 


Policy Manual. 


Concerns regarding release of information 
about groups by Statistics Canada 


This complaint raised the interesting issue of 
“group privacy,” which illustrates the need for 
caution when releasing information about 
identifiable groups. While disclosures of this 
kind may not identify any specific individual, 
they can still have an impact on personal pri- 
vacy, because information about the group 
can diminish the privacy of every individual 


member of the group. 


In this instance, a man who had received a 
series of telephone solicitations from brokerage 
firms filed a complaint against Statistics 
Canada, alleging that it had disclosed a sufh- 
cient amount of his personal information, 
obtained from the Canada Customs and 
Revenue Agency, to enable a research firm to 


determine his annual income. 
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The investigation revealed that the informa- 
tion sold by Statistics Canada to the research 
firm was in fact obtained from the r991 
Census, rather than from income tax records, 
as the complainant had alleged. And although 
the information did apply to a specific 
geographic area, it was not organized by 
postal code, as the complainant believed it to 
be. Nor was any of the information about 
identifiable individuals or personal informa- 


tion as defined in the Privacy Act. 


In short, Statistics Canada did not contravene 
the Privacy Act. But the complaint did raise 
an important question about the privacy of 


members of identifiable groups. 


Census products and services, even those 
based on information gathered from a 

20 per cent random sample of the population, 
can provide a fairly accurate and detailed 
portrait of the characteristics of the popula- 
tion in a given geographic area. Research 
companies can and do combine information 
obtained from Statistics Canada with infor- 
mation obtained from other sources, such as 
telephone directories and consumer surveys, 


to compile profiles of specific areas. 


When they can identify a relatively homogenous 
group in a specific geographic area, marketing 
companies can target individuals in that 

group, soliciting for everything from financial 


services to letters from charities. 


The potential for damage goes well beyond 
simple annoyance. Consider the possible effect 
of a statistical study of a small neighborhood 
that has a high rate of mental health problems, 
for example, or a study of an identifiable 


group that has a high rate of Hrv infection. 


I have raised this with Statistics Canada. It 
says that while it makes every effort to ensure 
that individuals can’t be identified in any 

of its statistical releases, it has established a 
working group to determine what measures it 
could take to address issues related to group 
privacy. It has indicated its willingness to 
explore this further with my staff. I look 
forward to further discussions with Statistics 


Canada on this matter. 


New electronic system at National Defence 
compromised privacy of thousands 


Failure to consider the privacy implications 

of a new electronic information system led to 
a situation in which any employee of the 
Department of National Defence (DND) could 
access personal information on thousands of 
military personnel. The situation could have 
been avoided if a few simple safeguards had 


been put in place. 


This case provides a classic example of 
how easily privacy can be compromised by a 
well-intentioned attempt at more efficient 


management. 
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Dnp wanted to give managers a tool that 
would allow them to manage their staff more 
effectively. However, the project officers 
neglected to consult the department's privacy 
co-ordinator to ensure the system respected 


the requirements of the Privacy Act. 


As a result, virtually any DND employee could 
visit the human resources section of the 
department’s internal computer network 

and read or download detailed personal infor- 
mation about members of the Canadian 
Forces. This included date and place of birth, 
home address, marital status, the names and 
dates of birth of dependents, and results of 


linguistic testing. 


Following the intervention by my Office, 
DND agreed to take corrective action to end 
this unjustified disclosure. It transferred the 
information to a site accessible by password 
only, with passwords distributed on a strict 


“need-to-know” basis. 


Dnp also posted an electronic message on the 
human resources site asking users to destroy 
any information taken from the old site. I was 
concerned that this message might not reach 
all those who may have extracted or down- 
loaded personal information from the file. I 
asked DND to take an additional corrective 
measure to trace users. The Assistant Deputy 
Minister, Finance and Corporate Services, 
sent a memorandum to all senior managers 1n 


National Defence asking them to warn all 
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employees to destroy any personal informa- 
tion originating from the original human 


resources site. 


It’s clear that in this case DND contravened the 
provisions on the use and disclosure of per- 
sonal information set out in sections 7 and 8 
of the Privacy Act, and violated the employees’ 
fundamental right to have their personal 
information protected. Therefore, I concluded 
that this complaint was well-founded. Given 
that DND took satisfactory corrective measures 
to respect the requirements of the Privacy Act, 


I considered the complaint to be resolved. 


Health Canada does not know 
if it disclosed personal information 


An individual complained that a Health 
Canada doctor inappropriately disclosed his 
psychiatric assessment to his federal govern- 
ment employer, the Canada Customs and 
Revenue Agency (ccra). ccra had referred 
the man for a fitness-to-work assessment, 
which Health Canada does on behalf of 
federal government departments and agencies. 
‘To support his allegation, the complainant 
referred to a fax cover page indicating that 
Health Canada had sent an 11-page document 
to a human resources advisor at CCRA in 


October 1998. 


A check of Health Canada’s file confirmed 
that its doctor had indeed faxed 1 pages to 


ccra at that time. However, the complainant's 
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psychiatric evaluation was not found in ccra’s 
files. It was impossible to determine exactly 
what Health Canada did send to ccra or 
even to confirm whether the fax had reached 


its intended destination. 


If the investigation had confirmed that the 
evaluation had been sent to the employer, I 
would then have been required to examine the 
circumstances of the disclosure. My review 
would have focused on whether the disclosure 


met the requirements of the Privacy Act. 


In this particular case, it is my view that there 
is a serious records management problem 
when a federal government department 
responsible for protecting sensitive medical 
information cannot determine what documents 
it sent by fax or whether they were sent to the 


appropriate individual. 


To avoid a recurrence of this problem, 

Health Canada sent a note to directors of all 
regional offices reminding them that medical 
reports should not normally be delivered by 
fax. In those cases where fax transmission is 
necessary, it outlined a protocol to be followed 
in order to keep personal information secure. 


This protocol includes: 


m Identifying the name and telephone 


number of the recipient; 


= Listing contents of the fax on the 


Cover page; 


= Contacting the recipient by telephone prior 
to transmitting the fax to ensure the person 
is there to receive the document personally; 


and 


= Asking the recipient to confirm receipt of 


the information in writing. 


These principles should be followed by any 
institution that sends personal information 


over a non-secure fax line. 


_ Information on vessel licences 
used to assess sales tax 


A man on the West Coast bought a small 

boat and acquired a small vessel licence issued 
by Canada Customs officers. He complained 
that the Canada Customs and Revenue 
Agency shared the information on his licence 
application with the British Columbia 
Ministry of Finance, which proceeded to col- 
lect provincial sales tax on the purchase price 
of the boat. The complainant said he doubted 
many new boat owners realized their personal 


information would be disclosed in this way. 


While small vessel licences are issued by 

customs officers, they do so on behalf of the 
Department of Fisheries and Oceans, which 
administers Small Vessels Regulations under 


the Canada Shipping Act. 


The Department of Fisheries and Oceans’ 
authority to disclose personal information 


without consent in this way is provided under 
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an agreement between the Governments of 
Canada and British Columbia, which allows 
for access, use, and disclosure of personal 
information to administer or enforce any law. 
This is consistent with the provisions of the 
Privacy Act, and 1 concluded that this was a 
permitted disclosure of personal information 


without consent. 


I did, however, have concerns about the trans- 
parency of the collection of the information. 
The Department of Fisheries and Oceans 
readily agreed to amend its licence application 
to advise boat purchasers that their informa- 
tion would be sent to provinces for assessment 
of sales taxes. The department has also agreed 
to review the agreement with a view to mak- 


ing it more specific. 


No standard for disclosure 
of personal information to doctors 


An individual complained that his employer, 
the Canada Customs and Revenue Agency, 
disclosed an excessive amount of his personal 


information to a psychiatrist. 


The individual had presented a claim to the 
Québec Commission de la santé et sécurité au 
travail for stress-related leave allegedly resulting 
from the negative work environment created 
by the employer. The employer contested the 
employee’s claim and requested the opinion of 


a psychiatrist through Health Canada. 


35 


ANNUAL REPORT TO PARLIAMENT 2000-2001 


The employer sent a letter to the psychiatrist 
explaining its concerns about the employee 
and attached a performance evaluation, which 
the employee had refused to sign, to support 
its contentions. The complainant alleged the 
negative appraisal should not have been 
disclosed and characterized the disclosure as 
an attempt by the employer to influence the 


psychiatrist’s opinion. 


Health Canada’s Protocol for Special Fitness 
to Work Evaluation states that the employer 
must give the doctor a description of the 
problems and the reasons it has requested an 
evaluation, but says nothing on the issue of 


sending documents. 


The Treasury Board of Canada’s Policy on 
Occupational Safety and Health does not 
address what type of documentation should 
be provided to doctors. Nor does Info Source, 
a directory of federal personal information 
holdings and the key reference tool in place to 
assist members of the public in exercising 
their rights under the Privacy Act. Info Source 
does not address the use of appraisals for the 
purpose of sick leave or medical opinions. 
That means federal managers have no directives 
when it comes to sending documents to 
doctors performing evaluations on employees. 


This is not an acceptable situation. 


36 


Pursuant to discussions between my Office 
and representatives of Treasury Board and 
Health Canada, Treasury Board agreed to 
revise its Occupational Health Evaluation 


Standard to include the following directives: 


m The employer is required to send the 


doctor only an explanatory letter. 


a The employer must consult the doctor 


before sending supporting documentation. 


a The employer must avoid using and dis- 
closing personal information concerning 
third parties when submitting its reasons 


for requesting an evaluation. 


mw Where circumstances allow, the employer 
must meet with the employee to explain 
the reason for the medical opinion, inform 
the employee what information will be 
provided to the doctor and why, in order to 


ensure the transparency of the process. 


a The employer must not use or disclose 
undocumented information such as 


hearsay or evaluative comments. 


‘Treasury Board has also indicated that it will 
include this information in bulletins it pre- 
pares for the access to information and privacy 
co-ordinators in federal organizations subject 


to the Privacy Act. 


Personal information of refugee claimant 
disclosed to another claimant 


An immigration lawyer complained that the 
Immigration and Refugee Board disclosed 
personal information about one refugee 
claimant to another applicant. What makes 
this case interesting is that the lawyer was 
independently representing both clients. 

The Board gave him the woman’s Personal 
Information Form, which she completed at 
the port of entry to support her refugee claim, 
in his role as counsel to the former spouse 
during his refugee hearing process. The Board 
notified the lawyer that the woman's form 


could be used during the spouse's hearing. 


The two individuals had arrived at the port of 
entry together and indicated at that time that 
they were common-law spouses. The Board 
argued that the details each claimed were 
relevant in assessing not only his or her own 
credibility, but also the credibility of the 
other. It maintained that the use of this 
personal information in both claims was con- 
sistent with the original purpose of collecting 
the information, which was to assess their 
claims for refugee status. I agreed and consid- 


ered the complaint to be not well-founded. 


Nonetheless, this case raises important issues. 
The lawyer expressed concerns for women, 
particularly abused women, whose refugee 
claims are joined with those of other family 
members. This could mean a woman having 


to disclose sensitive, intimate details of abuse 
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before a room full of relatives or former rela- 
tives. This could be a difficult, traumatic 
experience, one that would invade the privacy 


of an individual. 


The Board’s process does in fact provide for 
such circumstances. Claimants can make 
application to have joined claims treated sepa- 
rately. I was pleased to learn that in this case, 
the Board withdrew the woman's Personal 


Information Form when the lawyer objected. 


The Personal Information Form will also be 
improved by adding a paragraph that clearly 
alerts refugee claimants to the possible use of 


their personal information in another hearing. 


Selection boards 
and hand-written notes 


The Privacy Act is clear: personal information 
used by a federal government institution to 
make an administrative decision about an 
individual is accessible to that individual, and 


must be kept for a minimum of two years. 


This provision applies to the hand-written 
notes that members of selection boards take 
during employment interviews. Members of a 
selection board ponder their notes in reaching 
a decision on a particular individual’s suitability 
for a position. That means that the notes have 
been used for an administrative purpose, 

and therefore must be retained for at least 
two years. This issue was addressed in several 


reports tabled by my predecessor. 
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In this instance, an unsuccessful applicant for 
a job with Fisheries and Oceans Canada, in 
order to prepare an appeal of the competition, 
requested access to the original, hand-written 
notes taken by selection board members. 

The department responded to the request by 
providing a copy of a typed summary report 
of its board members notes, and said it had 
destroyed the original notes upon completion 


of the competition. 


After some deliberation, the department 
accepted my view that it had a responsibility to 
maintain its original notes on file. Department 
officials said there was no deliberate intent to 
deny access to personal information and 
assured me that policies have been amended 
to ensure that the original notes of selection 


board members are kept on staffing files. 


Personal e-mail 
not necessarily private 


A Department of National Defence (pnp) 
employee questioned whether his employer 
was entitled to use and disclose his private 
e-mail messages in the investigation of a harass- 
ment complaint when those e-mail messages 


had been collected by improper means. 


Someone had gained access to the complainant’s 
computer and downloaded many of his 
e-mail messages. These messages contained 
personal information about the complainant, as 
well as derogatory comments about colleagues. 


The messages were printed and left on the 
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desks of several employees. After reading the 
e-mails, these employees gave copies to their 
supervisor and lodged harassment complaints 


against the complainant. 


The employer hired a consultant to investigate 
the harassment complaints and gave a copy 

of the e-mail messages to the consultant 

as evidence in his investigation. (A separate 
investigation failed to establish who had 


downloaded the messages.) 


When the complainant learned that his 
e-mails had been provided to the consultant 
he complained to my Office, asserting that 
they had been improperly obtained in the 
first place, and that the employer had no 
right to use them in the investigation of the 
harassment complaints or to disclose them 


to the consultant. 


This case raised important and timely issues. 
Although this was not a criminal investigation, 
it nonetheless raised a question about the use 
in an investigation of evidence that has been 


obtained unfairly, unethically, and possibly 
illegally. 


That leads us to the whole question of work- 
place surveillance, and particularly the privacy 
of e-mail, a very hot topic in the last couple 
of years. As I mentioned earlier in this report, 
employers often claim that surveillance of 
e-mails is justified by the need to protect their 


employees against harassment. 


I firmly believe that employers have to provide 
this protection. But I don’t accept that protec- 
tion necessarily translates into wholesale 
surveillance of e-mails or computer use. We 
accept that there are stringent limits on an 
employer's right to read employees’ mail, 
eavesdrop on their telephone calls or rifle 
through their desk drawers. I think we have to 
look closely at e-mail communications to see 


what principles should apply there as well. 


The Treasury Board of Canada’s Policy on the 
Use of Electronic Networks incorporates the 
principle that the Charter of Rights and 
Freedoms protects employee privacy. It stipu- 
lates that institutions must put in place their 
own specific policy on the use of electronic 
networks. It further states that the policy 
should identify authorized and acceptable 
uses of the networks. The Treasury Board 
policy does not prevent monitoring if certain 


conditions apply. 


Dnw’s specific policy on the Management of 
Electronic Mail states that there should be no 
expectation of privacy on the part of employees 
when using e-mail systems. I find this deeply 
troubling. The law on privacy has developed 
around the notion of the “reasonable expecta- 
tion”; one of the ways that the courts deter- 
mine whether privacy has been violated has 
been to determine first whether a person 
could have reasonably expected privacy in a 


particular place and time. But I don't agree 
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that it follows from this that an employee's, or 
anyone's, privacy can be simply eradicated by 
telling them not to expect any. While manage- 
ment has the right and the responsibility to 
manage, it has to operate within limits, 
including respect for fundamental rights. It is 
not for management alone to determine 


whether an expectation of privacy is reasonable. 


In this specific case, I concluded that the 
employer had not contravened any provisions 
of the Privacy Act, and perhaps more impor- 
tantly that it had not behaved unreasonably in 
the circumstances. I believe the complainant's 
expectation of privacy was lost once the 
e-mail messages had fallen into the hands of 
colleagues. The rights or wrongs of how that 
happened were not at issue, as I found no 
evidence that either the complainant's manager 
or his supervisor was responsible for monitor- 


ing or improperly gaining access to his e-mail. 


The employer was authorized to hire a con- 
sultant to conduct the harassment investigation, 
and I concluded that it was authorized to 
provide the e-mails to the consultant. The 
e-mails were the basis of the complaints, so 
the employer could not reasonably have 


refused to provide them. 


Lastly, I advised the complainant that 
employees who use the employer's electronic 
network in a manner that contravenes a 
departmental policy — in this case, to write 


derogatory messages about co-workers that 
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could be construed as harassment — should 
not expect their managers to ignore the 
inappropriate behaviour when it is brought to 
their attention. Again, how it was brought to 
their attention was not the issue. Had there 
been evidence that managers or supervisors 
had been responsible for gaining access to 
the complainant’s e-mail, I might well have 


viewed the matter differently. 


INCIDENTS UNDER THE 
Privacy AcT 


An incident is a matter that has been brought 
to my attention and warrants an inquiry but 
is not a formal complaint under the Privacy 
Act. During the period covered by this report, 
we looked into 21 incidents that came to my 
attention through various sources. The majority 
of these dealt with the inadvertent disclosures 
of personal information or perceived breaches 
of the Privacy Act. The following are some of 


the more striking examples. 


Opening mail — right to privacy 
must be first consideration 


In March 2001, it was revealed that Canada 
Customs officials were opening mail coming 
into Canada and passing the information on 
to Citizenship and Immigration Canada. 
The sanctity of personal correspondence is a 
cornerstone of privacy, and Canadians do not 
expect that their letters sent through the mail 


will be opened by anyone except the intended 
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recipient. We don't live in one of those coun- 
tries where mail is routinely opened by the 
authorities — or so we thought. I immediately 


looked into this matter. 


Many people were surprised to learn that the 
opening of mail by Customs is lawful, if the 
mail weighs over 30 grams. If it is less than 

30 grams, the Customs Act prohibits opening 
it without either a search warrant or the 
addressee’s consent. But as long as the mail, 
whether a package or personal correspondence, 
weighs more than 30 grams, Customs inspec- 
tors may open it if they believe that it contains 
contraband or false documents. Any mail 
considered suspicious from an immigration 
standpoint is turned over to immigration 


officials for examination and further action. 


It is of great concern to me that this arbitrary 
and artificial weight distinction allows the 
opening of, not just packages, but private 
correspondence. Correspondence should be 
treated with the greatest possible respect for 
privacy. The weight of the correspondence 
should not make a difference. Sending a letter 
by any form of “priority post” requires placing 
it in a large and comparatively heavy outer 
envelope that by itself can often put the item 
in the “over 30 grams” category. A letter 
should not be considered any less “mail,” and 
less deserving of privacy protection, simply 
because the sender wanted to ensure its timely 
and safe arrival, or for that matter because it’s 


lengthy and therefore heavier. 


I made these concerns known to the Minister 
of Citizenship and Immigration, and made 


the following recommendations 


m Where Customs officials detect, in an 
envelope weighing more than 30 grams, a 
solid object that appears to be something 
other than correspondence, opening it 
would fall within the normal activities of 


the Customs process. 


m Where no solid object is detected and an 
envelope is detained only on suspicion 
that it may contain fraudulent documents, 
Customs should pass the mail to 
Immigration unopened. Immigration 
could then obtain a warrant to open it if 


it had reasonable grounds to do so. 


The Minister of Citizenship and Immigration 
rejected the recommendations, citing the 
apparent difficulty of detecting some solid 
objects like laminated cards in envelopes, and 
the great volume of mail passing through a 
postal facility. Essentially, she argued that 
implementing the recommendations would 


demand greatly increased resources. 


Since I could not reach a consensus with the 
Minister of Citizenship and Immigration, | 
turned my attention to the Minister responsi- 
ble for the Canada Customs and Revenue 
Agency. My discussions with the Minister 

of National Revenue produced a resolution 
to this matter. Customs has modified its 


approach and now disregards the weight of 
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courier-type envelopes in determining 
whether a mailing weighs more or less than 
30 grams. Letters within such courier packages 
are treated as personal mail and not opened if 
the letters themselves are under 30 grams. I 
very much appreciate the National Revenue 


Minister’s assistance in resolving this matter. 


Health Canada and its list 
of would-be marijuana users 


Health Canada contacted my Office after 
receiving a call from a newspaper reporter 
who said she had obtained the names of 
128 individuals who had applied to the 
department for legal exemptions to obtain 


marijuana for medical purposes. 


My investigation focused on two issues: 
determining the names on the list so that 
those people could be advised that their 
personal information had been compromised, 
and finding out how the list came into the 


reporter's possession. 


The reporter refused to give the list to either 
my Office or Health Canada. As more than 
160 people had applied for the marijuana 
exemption by the time this matter came to 
light, there was no way to determine the iden- 
tities of the 128 people on the reporter's list. 
Health Canada had no choice but to notify 
all of the individuals that it had failed to 


safeguard their personal information. 
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In order to identify the source of the leak, 
Health Canada carried out an internal investi- 
gation. It found that internal security was not 
adequate. Virtually all employees in the Office 
of Controlled Substances had access to the 
names. Recommendations to improve security 
were implemented promptly. Now, access to 
the database is on a need-to-know basis and 


restricted through the use of passwords. 


As for the list itself, following interventions 
by my Office, the reporter agreed to destroy 
it. The list has not been published and the 
reporter confirmed that no copies had 


been made. 


I was satisfied with the security measures 
implemented by Health Canada and its 
efforts to sensitize employees to their obliga- 


tions under the Privacy Act. 


Completed firearms licence applications 
stolen from Justice Canada 


As part of its efforts to promote firearms regis- 
tration, Justice Canada’s Canadian Firearms 
Centre runs Operation Outreach, a program 
to reach the owners of firearms in their own 
communities. Using storefront operations in 
malls and vans that travel to small towns 

and country fairs, staff help people fill out 
firearms licence applications and mail the 
completed forms to a licence-processing centre. 
In British Columbia, one of the vans was 


stolen. The van was recovered, but a box 
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containing some 20 completed applications 


that had been in the van was missing. 


Following news reports of the incident, I 
asked that the circumstances of the theft be 
examined along with the efforts undertaken 
by the centre to identify and notify applicants 
whose forms were taken. Not only had per- 
sonal information gone missing, but that 
information could be used by unscrupulous 
individuals to obtain firearms licences they 


might not be entitled to have. 


The centre appealed through the media for 
individuals to come forward if they had com- 
pleted an application in the days before the 
theft. Only two did. The hope remains that 
other applicants will contact the centre once 
they realize they have not yet received their 
licence. As a long-term safeguard, the centre 
has updated its policy to ensure that com- 
pleted applications are mailed to the Firearms 
Centre at the end of each day. Although this 
incident remains unresolved, I am satisfied 


with the centre’s efforts at damage control. 


Concerns about biometric 
identification technology 


Biometric technology, which identifies people 
by their physical characteristics, is of special 
interest to my Office. When the media reported 
that the RcMp was using face recognition soft- 
ware to monitor travellers at Toronto's Pearson 
Airport and identify criminals, I launched an 


investigation immediately. 


As it turned out, the report was wrong. The 
RCMP is not using surveillance cameras with 
biometric software, although the software is 
in use in the rcp detention area at the 
airport to analyze photos of individuals who 
have been arrested. A photo of the individual 
under arrest is taken with a digital camera 
and stored on the hard drive of a stand-alone 
computer. The software takes point-to-point 
measurements of facial bone structure and 
compares this digital portrait of the individual 
under arrest against those already in the system. 
As bone structure cannot be altered as readily 
as hair or eye colour, the system may be able 
to spot individuals using various identities. 
This was a sophisticated version of the tradi- 


tional mug shots used by law enforcement. 


In this instance, I was satisfied that biometric 
software was not being used as the media 
reports suggested and no privacy concerns 


were identified. 


Taxpayer received 
someone else’s refund 


A reporter for the Calgary Herald was handed 
a pretty good story when she received another 
person's income tax assessment and refund 


cheque in the same envelope as her own. 


An investigation by my Office determined 
that a mechanical error at Public Works and 


Government Services Canada’s Winnipeg 
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Production Centre was to blame. The 
Winnipeg Production Centre prints and mails 
taxpayer assessments and cheques on behalf of 


the Canada Customs and Revenue Agency. 


The plant is fully automated to print, cut, and 
fold assessments and cheques. The documents 
are put into envelopes, which are then sealed. 
The sealed envelopes pass under an optical 
detector that shines light through them and 


warns if an envelope is too thick. 


This year however, due to changes in the grade 
of paper used and the number of pages of the 
form, the envelopes are thicker. The optical 
detector could not be adapted to accommo- 


date these changes, and was inoperable. 


Only one incident of this type has been 
reported. To help ensure the incident is not 
repeated, quality control at the plant has 
been tightened and there is increased random 


sampling of the final product. 


I was satisfied by the steps Public Works took 
to prevent future errors of this type and by its 


offer of an apology to the individual involved. 


Pusuic INTEREST DISCLOSURES 


Under paragraph 8(2)(m) of the Privacy Act, 
the head of a government department may 
disclose personal information without the 
individual’s consent where there is a compelling 
public interest that outweighs the invasion of 


the individual’s privacy or where the disclosure 
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would benefit the individual. A “compelling 
public interest” often pertains to public safety 
and security, or to accountability to the public 


for decisions taken by departments. 


Heads of departments are required under 
subsection 8(5) of the Act to provide me with 
written notice of any use of this provision. 
Ideally, this is done prior to the disclosure of 
the information. If appropriate, I may notify 
the individual concerned about the release of 
the information. In all cases, I attempt to 
ensure that only the minimum amount of 
personal information needed to achieve the 


public interest objective is disclosed. 


During the period covered by this annual 
report, I received notice of 53 of these 


disclosures. 


This past year, most notifications came 
from the rcmp, National Defence, 
Correctional Service of Canada, and the 


National Parole Board. 


The rcmp made a number of public interest 
disclosures in relation to the release of sexual 
offenders into the community at the end of 
their custodial sentences. In most cases, the 
individuals’ offences had involved children, 
and they were assessed as being at a high-risk 
to re-offend. Some had been deemed to be 
dangerous sexual offenders. Based on concern 
for citizens in the communities in which the 


offenders were released, the rncmp deemed the 


public disclosure of personal information to 
outweigh the harm caused by the invasion of 


the offenders’ privacy. 


On a number of occasions, National Defence 
disclosed information related to deaths on 
duty of Canadian Forces members. The infor- 
mation was released to the member’s next of 
kin on compassionate grounds in the hope 
that a better understanding of the circum- 
stances surrounding the death of their relative 


would help them achieve some level of closure. 


Correctional Service of Canada and the 
National Parole Board publicly disclosed a 
number of Board of Inquiry reports dealing 
with issues such as escapes from federal 
institutions, breaches of statutory release 
requirements, and inmates’ commission of 
further offences, including murder, while on 
release. These reports included personal 
information. Most of the cases had received 
significant media coverage. The individuals 
had been re-incarcerated, but because of 

the media coverage and the public scrutiny, 
Correctional Service of Canada and the 
National Parole Board considered it to be in 
the public interest to disclose the reports. The 
public disclosures were seen as necessary for 
the public to understand the events surround- 
ing the incidents and the actions taken to 


prevent recurrence. 


Top Ten Departments by Complaints Received 
April 1, 2000 to March 31, 2001 
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Access to 
Personal 
Organization Total Information Time Privacy Other 
Correctional Service of Canada 672 136 342 194 
Canada Customs and Revenue Agency 197 91 Do 47 
Human Resources Development Canada 190 63 88 3h) 
Royal Canadian Mounted Police 136 85 24 26 1 
National Defence 100 40 46 14 
Citizenship and Immigration Canada 90 ay 48 10 
Canadian Security Intelligence Service 40 oy), 2 1 
Canada Post Corporation 38 16 4 18 
Metiee Canada 30 8 12 10 
Foreign Affairs and International Trade Canada De, 4 28 0 
Others L3 oy 42 54 
Total 1,713 609 690 413 1 


45 


ANNUAL REPORT TO PARLIAMENT 2000-2001 


Completed Investigations and Results by Department 
April 1, 2000 to March 31, 2001 


Well- Well-Founded/ 


Not 


24 


47 


457 


Organization founded Resolved Well-founded Discontinued Resolved Settled ‘Total 
Agriculture and 

Agri-Food Canada 0 0 0 0 0 5 
Auditor General of Canada 1 0 1 0 0 0 
Canada Customs and 

Revenue Agency 64 Vip 57 6 28 60 
Canada Mortgage and 

Housing Corporation 0 0 0 0 0 1 
Canada Ports Corporation 0 0 0 Je 0 0 
Canada Post Corporation 5 i 5 0 Z 11 
Canadian Environmental 

Assessment Agency 0 0 0 0 0 1 
Canadian Food 

Inspection Agency 0 0 0 1 0 Z 
Canadian Grain Commission 0 0 0 l 0 0 
Canadian Heritage 0 0 1 0 0 3 
Canadian Security 

Intelligence Service 0 2 43 0 0 2 
Office of the Chief 

Electoral Officer 0 0 0 i 0 pi 
Citizenship and 

Immigration Canada 35 ws 2A 7 0 12 
Office of the Commissioner 

of Official Languages 0 0 0 1 0 0 
Correctional Service of Canada 262 23 59 48 2 63 
Environment Canada 0 0 0 0 0 4 
Finance Canada 1 0 0 0 0 0 
Fisheries and Oceans Canada 0 0 1 0 0 1 
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Completed Investigations and Results by Department (Continued) 
April 1, 2000 to March 31, 2001 


Well- Well-Founded/ Not 

Organization founded Resolved Well-founded Discontinued Resolved Settled Total 
eae eee ee 
Foreign Affairs and 

International Trade Canada 3 0 4 1 1 3 12 
Health Canada 5 0 26 1 1 2 35 
Human Resources 

Development Canada ie) 4 21 14 2 Sad Valin 
Immigration and Refugee 

Board of Canada 4 3 6 0 0 2, 15 
Indian and Northern 

Affairs Canada 4 0 2 0 0 5 11 
Industry Canada 0 0 5 i 0 3 9 
Justice Canada ») 0 43 3 0 8 56 
Millennium Bureau 

of Canada 0) 0 1 0 0 0 1 
National Archives of Canada 1 0 7. 6 a) 12 28 
National Defence >») 13 26 ie 1 26am 8 
National Parole Board 1 0 3 0 0 Ha 11 
National Research 

Council of Canada 0 0 p. 0 0 0 2 
Natural Resources Canada 0 0 0 0 1 0 l 
Ombudsman National 

Defence and Canadian Forces 1 0 0 0 0 3 4 
Pension Appeals Board 0 0 0 0 0 1 l 
Privy Council Office 0 0 ® 1 0 1 5 
Public Service Commission 

of Canada 1 1 3 1 0 0 6 
Public Service Staff 

Relations Board 0 l B 0 0 0 6 
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Completed Investigations and Results by Department (Continued) 
April 1, 2000 to March 31, 2001 


Well- Well-Founded/ Not 

Organization founded Resolved Well-founded Discontinued Resolved Settled ‘Total 
Public Works and Government 

Services Canada 8 0 6 i 0 2 ly 
Commission for Public 

Complaints against the RCMP 0 ] 1 0 0 0 Z 
Royal Canadian 

Mounted Police 18 9 tl t2 4 25 119 
Social Sciences and 

Humanities Research 

Council of Canada 0 0 0 0 0 1 1 
Solicitor General Canada 0 D 11 1 0 0 14 
Statistics Canada 1 0 1 0 0 0 2 
‘Transport Canada 2 0 0 1 0 3 6 
‘Treasury Board of Canada 0 0 3 1 0 0 4 
Vancouver Port Authority 0 0 0 2 0 0 4 
Veterans Affairs Canada 0 0 3 1 0 13 17 


Total 
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Completed Investigations by Grounds and Results 
April 1, 2000 to March 31, 2001 


Well- Well-Founded/ Not 
founded Resolved Well-founded Discontinued Resolved Settled Total 
SS a 
Personal Information 11 73 241 54 36 215 630 
Access 11 70 229) >I 15 20S) 
Correction/Notation 0 3 2 3 21 5 44 
Language 0 0 0 0 0 1 1 
Inappropriate Fees 0 0 0 0 0 2 Ms 
Privacy 45 9 124 58 8 95° 339 
Collection 3 0 28 Do 2 a2 98 
Retention and Disposal B y 9 0 4 7 24 
Use and Disclosure 40 7. 87 25 ye Omen. Ly, 
Time Limits 497 0 56 9 0 Lies 73 
Correction/Time 15 0 1 1 0 0 17 
Time Limits 473 0 31 8 0 Lor 522 
Extension Notice 9 0 24 0 0 1 34 
Total Spe 82 421 ail 44 321 1,542 
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Origin of Completed Investigations 
April 1, 2000 to March 31,2001 


Province/ Territory Number 
Newfoundland 5 
Prince Edward Island 4 
Nova Scotia 103 
New Brunswick 50 
Quebec 306 
National Capital Region — Quebec 11 
National Capital Region — Ontario L77i 
Ontario 347 
Manitoba 82 
Saskatchewan 63 
Alberta 109 
British Columbia 267 
Nunavut 0 
Northwest Territories D 
Yukon 9 
Outside Canada Je 
Total 1,542 
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Inquiries by type under Privacy Act 
April 1, 2000 to March 31, 2001 


Subject Number 
Adoption, genealogy, missing persons 31 
Census 45 
Criminal records, pardons, U.S. waivers 190 
E-311 Travel Declaration Form oy) 
Firearms 44 
Longitudinal Labour Force File 68 
Medical Records 91 
From Members of Parliament D4 
No jurisdiction, federal 427 
Privacy Act, interpretation and process 6,460 
Public Affairs (media, publications) 896 
Redirect to provincial commissioners 1,068 
Redirect to other federal agency 651 
Redirect to other 499 
Register of Electors 21 
Social Insurance Numbers 746 
Other 296 


nn EEE EEE 


Total 11,599 
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Privacy PRACTICES AND REVIEWS 


Introduction 


Section 37 of the Privacy Act permits me to 
initiate compliance reviews, at random, of the 
personal information-handling practices of 
federal institutions. What this means is that 

I audit them, to verify whether they are com- 
plying with the principles for the collection, 
use, disclosure, protection, retention, and 
disposal of personal information set out in 


sections 4 to 8 of the Act. 


The Office has been conducting compliance 
reviews under section 37 since 1984. I have 
expanded this function during the past year, 
setting up a Privacy Practices and Reviews 
Branch, to allow me to assess how well organi- 
zations are complying with the requirements 
set out in the Privacy Act and the Personal 
Information Protection and Electronic 
Documents Act. (The private sector legislation 
gives me similar powers of audit; my 
discussion of private sector audit activity is 


in Part Two of this report.) 


As an ombudsman, I like privacy audits to be 
non-confrontational whenever possible. An 
audit, ideally, is a co-operative, constructive 
approach to dealing with issues before they 
become complaints. It’s useful for organiza- 
tions that want to improve their personal 
information-handling practices. Although I 
have the same powers with respect to audits 


that I do in investigations — to summon 


§2 


witnesses, administer oaths, and compel 
organizations to produce evidence — I would 
only resort to them if I didn’t get voluntary 


co-operation. 


My staff in the Privacy Practices and Reviews 
Branch, in addition to auditing and reviewing, 
works with federal organizations that are look- 
ing for a better understanding of compliance 
issues and the privacy implications of programs 
and practices. It’s critical for government 
departments to fully explore how privacy can 
be protected before they go ahead with plans, 
however well intentioned, to cut costs or 
protect citizens. On request, my branch 

staff reviews new proposals for information 
management, such as data-matching initiatives, 
the creation of databases, and information- 
sharing arrangements with other organizations. 
This is another way to help ensure that the 


Canadians’ privacy rights are respected. 


In the next few pages I describe three key 
cases concerning the personal information- 


handling practices of federal institutions. 


Personal documents not shredded 
— Golden West Document Shredding, Inc. 


I have spoken many times about the need to 
develop a “culture of privacy” within organiza- 
tions, both public and private. Whenever I 
read a magazine article about privacy, look at 
a conference agenda, or review the latest sur- 
vey on people's privacy concerns, the focus is 


almost always on the private sector. That focus 


is appropriate, but we should not lose sight of 
the enormous diversity of personal informa- 
tion that governments collect, use, and share. 
In fact, many of the most serious threats to 


privacy continue to come from governments. 


Unlike businesses, governments have the 
power to demand personal information from 
their citizens. They collect information using 
the force of law. When a government agency 
or program needs personal information to 
carry out its mission, that information will 
be collected. Individuals have no choice in 


the matter. 


As citizens, we must interact with government 
in order to participate in social programs, 
receive public assistance, and contribute to 

the public good through taxation regimes. In 
doing so, we entrust government with some 
of our most sensitive personal information. 
Whether applying for employment insurance, 
filing income taxes, registering firearms, or 
filling in census forms, individuals are not ina 
strong position to oppose the collection or use 


of their information. 


So government must be particularly vigilant in 
maintaining the trust that citizens place in its 
ability to preserve the security and confiden- 
tiality of records that document individuals’ 


lives and their identities as Canadian citizens. 


The following finding represents a significant 
betrayal of that public trust, and provides a 


glaring demonstration of what can happen 
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when cost and expediency are given precedence 


over privacy. 


More than 30 federal departments and agen- 
cies had stored records at the Pacific Region 
Federal Records Centre of the National 
Archives of Canada. The centre was holding, 
literally, tonnes of highly sensitive personal 
information. The normal procedure is to 
destroy these records following a required 
retention period. A Vancouver Sun journalist 
informed us that a private sector company, 
hired to shred and recycle the records, was 
instead offering the material for sale to the 
highest bidder — intact, because whole paper 
brings a higher price than shredded paper on 


the recycling market. 


Investigation revealed that between January 
and mid-July 1998, the National Archives had 
sent several hundred tonnes of material to 
Golden West Document Shredding, Inc. in 
Burnaby, B.C., for destruction. This was in 
addition to material Golden West had 
obtained directly from other federal govern- 
ment institutions. The following partial 

list catalogues some of the types of records 
involved and demonstrates the extent to 
which the privacy of Canadians may have 


been compromised: 


= From Canada Customs and Revenue 
Agency, more than 22,000 boxes of mate- 
rial including tax returns, I’4 slips, state- 


ments of investment income; 
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= From Human Resources Development 
Canada, claims for employment insurance 
benefits, employment counselling client 
files, applications for old age security and 


guaranteed income supplement; 


= From Statistics Canada, census employment 
records, census interview records, surveys 


of employment and other surveys; 


m From Public Works and Government 
Services Canada, employee pay records, 


cheque registers, payroll registers; 


= From Citizenship and Immigration 


Canada, immigration case files. 


If this information had fallen into the wrong 
hands, the consequences could have been 
disastrous for thousands of Canadian citizens. 
Detailed personal information, such as social 
insurance numbers, dates of birth, bank 
account numbers and home addresses, is a 
valuable commodity. In the proliferating 
crime known as identity theft, it is used by 
criminals to obtain credit cards, open bank 
accounts, redirect mail, rent vehicles, and 
even secure employment. Victims of identity 
theft often incur substantial financial losses, 
and must expend great efforts to restore their 


credit and reputation. 


My staff found clear evidence that managers 
at both Public Works and the National 
Archives knew about the shredding company’s 


serious financial, security, and technical 


54 


problems before granting it security clearance 
to transport and shred classified federal paper 
waste. Moreover, the company that received 
the shredding contract was not even the same 
company that had made the original bid. 
The bid was submitted by “Golden West 
Document Shredding Inc.”, a bankrupt 
company, and not “Golden West Document 
Shredding (1995) Inc.”, which was awarded 
the contract. This inconsistency either went 


unnoticed or was ignored. 


The Public Works security officer responsible 
for inspecting Golden West's facilities con- 
cluded that the company was barely meeting 
minimum requirements to obtain a facility 
security clearance. But he granted clearance 
after the manager of the National Archives 
Federal Records Centre assured him 

that National Archives would inspect the 


facility regularly and report any problems 
to Public Works. 


Inspections, as it turned out, were insufficient 
to prevent the company from selling unshred- 
ded classified documents. In July 1998, during 
a surprise visit to the Golden West shredding 
facility, employees of Public Works and the 
National Archives found that approximately 
95 tonnes of unshredded classified material 
had been sold to a paper-buying company, 
and was baled and prepared for shipment 


overseas and to the U.S. for recycling. 


The rcmp investigated and reported to Public 


Works, but the report was not made public, 


and my office was not informed of this alarm- 
ing situation. Information we received from 
the rcmp during our investigation indicated 
that, before the material was seized at Golden 
West in July 1998, a recycling company had 
purchased four truckloads of government 
information. Two loads had been shipped via 
truck to the U.S. and another two loads had 
been shipped overseas, one to South Korea 
and another to the People’s Republic of 
China. The rcmp was not able to determine 


whether the material was shredded. 


In my findings after investigation, I agreed 
with the conclusions of the Rcmp: responsibil- 
ity for this incident rested squarely on the 
shoulders of National Archives and Public 
Works. Both had failed to exercise proper care 
in selecting Golden West. Both had failed to 
carry out their responsibilities to protect the 
highly sensitive personal information of thou- 


sands of Canadians. 


The contract with Golden West came about 
because National Archives had decided to 
discontinue its in-house disposal service for 
classified paper waste for government depart- 
ments. That decision was made in an effort to 
cut costs. But it was made without paying 
serious attention to protecting privacy. 
Monetary savings cannot override the legal 
obligation to protect individuals’ personal 
information. The National Archives, acting 
on behalf of other departments and agencies, 


was fully responsible for the security and 
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confidentiality of all the information until the 
paper was rendered unreadable. Both the 
National Archives and Public Works (as the 
contracting authority) were obligated to 
ensure the contractor was disposing of the 


records properly. 


The National Archives has a vital role to play 
in ensuring that classified government records 
are properly destroyed at the end of their life 
cycle. It must provide leadership in the setting 
of standards and practices for records and 
information management for the Government 
of Canada. Requiring departments to make 
their own arrangements for classified waste 
disposal substantially increases the risks. This 
incident never would have occurred had the 
National Archives continued to shred waste at 
the regional records centre or had federal 
employees monitored the destruction at 


all times. 


From a risk management perspective, the best 
solution would be to re-establish on-site 
shredding of sensitive records by the National 
Archives. An alternative could be the use of 
private off-site shredding services, but only if 
they can guarantee adequate security measures, 
and only if the shredding is under constant 
supervision of Archives staff. I understand the 
substantial resource implications of these 
options for the National Archives, and I would 
be prepared to discuss any other equally 


effective proposals. 
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Based on the findings of this investigation, | 
have made a series of recommendations to the 
National Archives and Public Works, and have 
requested that they provide my office with a 
report on how these recommendations will 

be implemented. I have also asked that in the 
future they notify my office, without delay, 
of any accidental or improper disclosure of 


personal information. 


In addition, I have brought my concerns 
about the security and confidentiality of per- 
sonal information that is to be destroyed to 
the attention of the Treasury Board, which is 
responsible for setting the Government of 
Canada’s Security Policy and ensuring that it 
is followed by departments. As a result, the 
Board agreed to carefully examine the recom- 
mendations in my report that relate to either 
the security policy or the particular standard 
on contract security in the context of the 
current review of the Security Policy of the 
Government of Canada with a view to reducing 


the likelihood of such an incident reoccurring. 


Privacy concerns 
at Canadian Firearms Program 


My Office has taken a keen interest in the 
Canadian Firearms Program since the 
mid-1990s — naturally, since the program 
involves the collection and use of large 
amounts of highly sensitive personal informa- 


tion. The Office identified a number of 


potential privacy concerns when the concept 
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was first proposed, suggested several changes 
to protect privacy when the legislation was 
before Parliament, and provided further 
comment when the subsequent regulations 
were attached to the legislation. Not one of 


our suggestions was accepted. 


My Office continues to receive numerous 
inquiries and complaints about this program, 
including some from Members of Parliament. 
My predecessor initiated a review in January 
2000 of the personal information-handling 
practices of the program. That review has now 
been completed. Based on it, my chief privacy 
concerns about the program relate to two 
areas: access and correction rights, and the 


collection and use of personal information. 


The right of access and correction is especially 
critical because inaccurate or unsubstantiated 
information in the Firearms Interest Police 
database, for example, can lead to delays, 
licence refusals, or unnecessary questioning of 
neighbours and acquaintances. (The Firearms 
Interest Police database was created in 1998 to 
meet the objective of section 5 of the Firearms 
Act with respect to ineligibility to hold a 
licence. More than 900 law enforcement 
agencies across Canada feed incident-reporting 
codes into the National Police Services 
Network, which then serve as flags in the data- 


base during the application-screening process.) 


For individuals exercising their right of access 
to and correction of their personal information 


held by the Firearms Program, it’s proving 


to be difficult and time consuming. The 
multi-jurisdictional nature of the program 
sometimes results in them having to go 
from one department or agency, or one level 
of government to another, to access their 


personal information. 


An individual in a province such as Ontario, 
for example, where there is provincial and 
municipal privacy legislation, could be 
required to submit as many as three separate 
access requests in order to obtain the personal 
information related to one firearms licence 
application submitted at the federal level. 
The situation is worse for residents of Prince 
Edward Island, who do not yet have a 
legislated right of access to their personal 


information held at the provincial level. 


With respect to the collection and use of 
personal information, my review revealed 
that the controls limiting access to the Police 
Information Retrieval System, for example, 
are inadequate. Firearms officers have access 
to more information than they need to make 
decisions about the eligibility of applicants. 
They also have access to personal information 
about other individuals, such as witnesses, 
acquaintances, and victims. These individuals 
are not applying for licences. The information 
about them would not normally be relevant to 


program requirements. 


Another problem is that firearms officers 
rely on information collected from the Police 


Information Retrieval System database with- 
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out verifying the accuracy of the information 
with the originating police agency. This is 
contrary both to established Rcmp policies 
and to section 6(2) of the Privacy Act, which 
requires that personal information be accurate, 
up-to-date and complete. The review also 
revealed that some of the information being 
collected from police databases for the 
Firearms Interest Police system relates to 
incidents that do not qualify under section 5 
of the Firearms Act or that are based on 


unsubstantiated information. 


I also assessed the personal history questions 
on the firearms licence application form to 
determine if they are consistent with the 
Privacy Act's restrictions on the collection of 


personal information. 


In my view, the Firearms Program has not 
provided a demonstrable need for all of the 
questions. I have concerns about the highly 


intrusive nature of these three questions: 


m “19(d) During the past five years, have you 
threatened or attempted suicide, or have 
you been diagnosed or treated by a medical 
practitioner for: depression; alcohol, drug 
or substance abuse; behavioural problems; 


or emotional problems? 


m 19(e) During the past five years, do you 
know if you have been reported to the 
police or social services for violence, 
threatened or attempted violence, or other 


conflict in your home or elsewhere? 
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m 19(f) During the past two years, have you 
experienced a divorce, a separation, a 
breakdown of a significant relationship, job 


loss or bankruptcy?” 


I have recommended that questions 19(d) and 
19(f) should be eliminated and that question 
19(e) should be revised to eliminate the refer- 
ences to “other conflict” and “elsewhere” and 


to eliminate the ambiguity. 


While my review also raised some issues 
relating to the disclosure of personal informa- 
tion and security measures, I found that the 
physical, personnel, and information technol- 
ogy security measures are appropriate to the 
information being protected. But the review 
revealed that the Firearms Program had not 
yet implemented policies, procedures and 
practices with respect to the retention and 


disposal of program records. 


Based on this review, on August 29, 2001, 

I made 34 recommendations for corrective 
measures relating to the program’s overall 
personal information management practices. 
While I have received positive comments 
from the Royal Canadian Mounted Police, I 
have yet to receive any response from the 


Department of Justice. 


The review did not address issues that have 
arisen subsequent to the research and fieldwork 


that formed the basis of this review, including 
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outsourcing issues and any international infor- 
mation-sharing agreements. In addition, this 
review did not cover the handling of personal 
information by the Canada Customs and 
Revenue Agency. Since January 1, 2001, the 
Canada Customs and Revenue Agency has 
been responsible for administering part of the 
Firearms Act, involved in customs declarations 
and the movement of firearms. At the time 

of my review, this part of the Act was not yet 
in force. We're currently looking into these 


aspects of the program. 


New databank protocol in place 
following Longitudinal Labour Force File 


Human Resources Development Canada 
(HRDC) dismantled its Longitudinal Labour 
Force File in May 2000, after an outpouring 
of public anger about it. Since then, HRDC 
has implemented a strict protocol for all 


future research projects by any of its offices. 


The protocol applies to all policy analysis, 
research, and evaluation activities that require 
the linkage of separate databanks. It also 
applies to linking with external data, includ- 
ing activities with an external contractor. 

It also covers the use of unmasked personal 
identifiers for survey purposes, whether the 
survey is conducted by HRDc, a contractor, 

or Statistics Canada, and whether the source 


of the data is an internal (i.e., HRDC) or exter- 


nal databank. 


Beyond the fact that HRDC will not carry out 
linkages except for policy analysis and research 
that are consistent with its legislated mandate, 
the main feature of the protocol is to seek a 
balance. It is guided by principles relating to 
the public interest, including confidentiality, 
transparency, an assessment of the public 
good and avoidance of potential harm to 


individuals and identifiable groups. 


I am pleased to see that HRDC recognizes that 
linking data from separate databases is intrin- 
sically intrusive of privacy. HRDC will only 
consider such undertakings where the benefits 
are clearly in the national public interest. 
Another requirement is that the objective of 
the project should not be detrimental to the 
individuals involved or to identifiable groups, 
in that it cannot be used to make administra- 


tive decisions about them. 


The protocol also stipulates that the dissemi- 
nation of information relating to database 
linkage will be done in accordance with the 
confidentiality provisions of the Human 
Resources Development Act, the Privacy Act, 

the Employment Insurance Act, the Income lax 
Act, the Canada Pension Plan and the Old 
Age Security Act, and with disclosure criteria 
contained in agreements with the provinces, 
territories, and other government departments 


and agencies. 
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I’m also pleased to see that, among other 
safeguards, all links among databases will have 
to satisfy a prescribed review and approval 
process. This involves the submission of docu- 
mented proposals to an internal expert com- 
mittee, the Databank Review Committee, 
composed mainly of senior HRDC officials. 
This review process includes consultation 
with my Office on all such projects, as well as 
with external partners when the project 
requires the linkage of HRDCc databases with 
external data. Finally, the recommendation of 
the Databank Review Committee is for- 
warded to the Deputy Minister of Human 
Resources Development, who is responsible 


for the approval of each project. 


Hroc is currently working on a legal protec- 
tion framework that will govern the future 
collection and use of data and information 
obtained from Canadians, to be used by 
HRDC for its specific research requirements. 
It will include penalties for misuse and will 
be done in a manner consistent with federal 
laws, policies, and procedures, and with the 
outcomes of any government review of the 


Privacy Act. 


Since September 2000, we have provided 
comments to HRDC on more than a 

dozen submissions, including the Canada 
Out-of-Employment Panel Survey, Canada 
Student Loans Programs-Key Performance 
Measure, and the Employment Benefits 


Support Measures Program. 
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Overall, I am satisfied that, under its protocol 


for databank linkages and its proposed legal 
protection framework, HRDC has addressed 
the concerns that my Office expressed about 


the Longitudinal Labour Force File. 


Reviews 


Immigration and Refugee Board 
and Canadian Nuclear Safety Commission 


Reviews of personal information-handling 
practices under section 37 of the Privacy Act 
were initiated near the end of this fiscal year 
at the Immigration and Refugee Board and 
the Canadian Nuclear Safety Commission. 
These reviews include on-site visits in the 
National Capital Region and in selected 
regional offices across Canada. The reviews 
should be completed during the fiscal year 


of 2001-2002. 


IN THE CourRTs 


Introduction 


My Legal Services Branch, headed by the 
General Counsel, provides me with special- 
ized legal and strategic advice and litigation 
support with respect to the Privacy Act and 
the Personal Information Protection and 


Electronic Documents Act. 


Section 41 of the Privacy Act allows an indi- 


vidual, following my investigation, to apply to 


the Federal Court for review of the decision of 


a government institution to refuse access to 


personal information. From the time the 
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Privacy Act came into force in 1983 to 
March 31, 2001, 106 applications for review 
have been filed in the Federal Court. Six of 
these were filed in the past fiscal year. 


Section 42 of the Privacy Act allows me, 
following completion of my investigation, to 
apply to the Federal Court for review of the 
decision of a government institution to refuse 
access to personal information, if I have the 
consent of the individual who requested the 
information. Three applications have been 
brought by previous Privacy Commissioners 


from 1984 to fiscal year end 2001. 


Previous Commissioners and I have also inter- 
vened before the courts on a total of six occa- 
sions from 1984 to the present in applications 
brought by others, under either the Access to 
Information Act or the Privacy Act. 


Recent Decisions 


Privacy Commissioner v. Canada Labour 
Relations Board 


This was an appeal by my predecessor from 
the decision of the Federal Court Trial 
Division. The case centred on notes taken by 
members of the Canada Labour Relations 
Board during the hearing of a complaint 

of a breach of a duty of fair representation. 
My predecessor argued that the notes, 

which contained personal information of 
the requestor, were under the control of the 
board and therefore subject to a right of 


access under the Privacy Act. 


The appeal was heard on May 9, 2000, and 


the decision was delivered from the bench. 


The Federal Court of Appeal held that the 
board members’ notes were not “under the 
control” of the board for purposes of para- 
eraph 12(1)(b) of the Privacy Act. The court 
stated: “These notes are being taken during 
the course of quasi-judicial proceedings, not 
by employees of the board, but by Governor 
in Council’s appointees endowed with 
adjudicative functions which they must 
perform not as agent of the board, but inde- 
pendently of other members of the board 
including the chairperson of the board or a 
government institution. The principle of 
judicial independence and its corollary, the 
principle of adjudicative privilege, as applied 
to administrative tribunals, lie at the heart 
of the board’s lack of control over the notes as 


a government institution.” 


My predecessor did not appeal this decision. 


Information Commissioner of 

Canada (Appellant) v. Commissioner of 
the RCMP (Respondent) and 

Privacy Commissioner (Intervener) 


This case involved the balance between the 
Access to Information Act and the Privacy Act. 
A list of postings of four named rcmp officers 
had been requested under the Access to 


Information Act. The Commissioner of the 
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RCMP refused to release the information, on 
the ground that it related to the employment 
history of these individuals and was therefore 
personal information as described in para- 
graph (b) of the definition of personal 
information in section 3 the Privacy Act. The 
Information Commissioner applied in court 


for a review of the refusal. 


At issue was whether the information could 
be disclosed pursuant to paragraph (j) of 
the definition of “personal information” in 
section 3 of the Privacy Act, which says that 
information relating to the position or func- 
tions of government officers or employees is 


not personal information. 


The Federal Court of Appeal held that the 
information in dispute was personal informa- 
tion to each officer and was not within the 
paragraph (j) exception to the definition of 


“personal information.” 


The court rejected the Rcmp’s argument that 
the exception in paragraph (j) only applies 
to the current position of a government 
employee (or to the last position held in 

the case of a former government employee). 
The court agreed with the Information 
Commissioner and myself that paragraph (j) 


can apply to past positions. 
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The court rejected the argument of the 
Information Commissioner that one should 
take an expansive view of the exception 
found in paragraph (j) to justify the release 
of the requested information. The court 
adopted my position, stating that the excep- 
tion should be construed in a way that does 
not allow for the disclosure of an individual’s 


cc OG » 
employment history. 


The Information Commissioner has obtained 
leave to appeal this decision to the Supreme 
Court of Canada. I will seek to intervene in 


the appeal. 
Ongoing cases 
Traveller Declaration Forms (form E-311) 


The following two cases concern the disclo- 
sure of personal information by the Canada 
Customs and Revenue Agency (ccra) to the 


Canada Employment Insurance Commission 


for use in an investigative data match program. 


The personal information in question was 
taken from Traveller Declaration Forms 
(E-311 forms) presented to Customs by 
Canadian residents between 1994 and 1996. 
The purpose of the data match was to 
detect employment insurance beneficiaries 
receiving benefits while out of Canada. The 


Employment Insurance Act requires claimants 
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to be available for work, and disentitles them 
from receiving benefits if they are absent 


from Canada. 


Privacy Commissioner v. Attorney General 
of Canada 


This is an appeal to the Supreme Court of 
Canada of a decision of the Federal Court of 
Appeal. The issues are whether the Federal 
Court of Appeal erred in finding that the 
disclosure of “personal information” by 
Customs to the Canada Employment 
Insurance Commission was authorized by 
section 8 of the Privacy Act and section 108 of 
the Customs Act, whether paragraph 108(1)(b) 
of the Customs Act provides the Minister with 
authority to disclose personal information 

to the Commission for use in an investigative 
data match program, and whether the 
Minister properly authorized the disclosure 
of personal information in the Traveller 
Declaration Forms to the Commission for use 


in an investigative data match program. 


This was a special case stated for opinion of 
the Federal Court jointly brought by my 
predecessor and the Attorney General of 
Canada. My predecessor was successful before 
the Federal Court Trial Division but unsuc- 
cessful before the Federal Court of Appeal. 


The decision of the Federal Court of Appeal 
was delivered on February 9, 2000, from the 


bench. The main conclusions are as follows: 


= The data match is authorized by the 
Ancillary Memorandum of Understanding 
for data capture and release of customs 
information on travellers entered into on 
April 26, 1997 by Customs and the Canada 
Employment Insurance Commission. 
Paragraph 108(1)(b) of the Customs Act gives 
the Minister of Revenue the discretionary 
power to authorize the arrangement set out 
in the 1997 Ancillary Memorandum. An 
earlier authorization issued in 1991 by the 
Minister of Revenue under paragraph 
108(1)(b) of the Customs Act was deter- 
mined not to be relevant to the matter 


before the court. 


m Paragraph 8(2)(b) of the Privacy Act is to 
be interpreted broadly. The court stated: 
“In this context, paragraph 8(2)(b) cannot 
but be interpreted as being a provision 
that enables Parliament to confer on any 
Minister (for example) through a given 
statute a wide discretion, both as to form 
and substance, with respect to the disclo- 
sure of information his department has 
collected, such discretion, of course, to be 
exercised in conformity with the purpose 


of the Privacy Act.” 


m These objectives were met because “the 


Minister satisfied herself that the disclosure 
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sought by the Commission was for a per- 
missible use and that no more information 
than that needed by the Commission 
would be disclosed.” In addition, the 

1997 Ancillary Memorandum included 
restrictions on the use of the information 
and its disclosure to third parties and other 
measures such as the establishment of an 
audit trail and provision for destruction 


of information. 


The Charter Challenge 


This is an appeal to the Supreme Court of 
Canada of a decision of the Federal Court of 


Appeal. The issues are: 


m Whether ccra’s disclosure to the Canada 


Employment and Insurance Commission 
of personal information from an individ- 
ual’s Traveller Declaration Form, the use of 
this information in a data match program, 
and its subsequent use as evidence against 
the individual, contravenes the individual's 
right to be secure from unreasonable search 


or seizure under section 8 of the Charter; 


If so, whether the evidence should have 


been excluded under subsection 24(2) of 


the Charter; and 


m Whether the provision in the Employment 


Insurance Act which disentitles the individ- 
ual from receiving benefits while outside of 
Canada infringes the applicant’s mobility 


rights under subsection 6(1) of the Charter. 
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The application for judicial review of the 
decision of the Office of the Umpire 
appointed under the Employment Insurance 
Act was dismissed by the Federal Court of 
Appeal. The Federal Court of Appeal, in a 
decision delivered February 9, 2000, found 
that there is no reasonable expectation of pri- 
vacy for Canadians in information contained 
in E-311 forms such as to engage section 8 

of the Charter (right to be secure against 
unreasonable search and seizure). The court 
also decided that paragraph 32(b) of the 
Unemployment Insurance Act (now 37(b) of 
the Employment Insurance Act: no entitlement 
to Employment Insurance benefits while 
outside Canada) did not go against the 
freedom of movement guarantee under 


subsection 6(1) of the Charter. 


Status 

The applications for leave to appeal to the 
Supreme Court of Canada in both these cases 
were granted on August 17, 2000. Both 
Notices of Appeal were filed and served on 


August 22, 2000. 


Notice of the Constitutional Questions in 
the Charter Challenge case was served on the 
Attorneys General of all the provinces and 
territories as required by the Supreme Court 
of Canada Rules. The Attorneys General of 


Ontario, Manitoba and Québec intervened. 


These cases were heard on November 7, 2001. 
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Clayton Charles Ruby v. Solicitor General 


This is an appeal to the Supreme Court of 
Canada of a decision of the Federal Court of 
Appeal. The applicant was denied access to his 
personal information in banks maintained by 
the Canadian Security Intelligence Service. 
The Solicitor General refused to release the 
information the applicant had requested. An 
application for review of the refusals was dis- 
missed by the Federal Court Trial Division. 
The matter was appealed to the Federal Court 
of Appeal, where the appeal was allowed in 
part and two matters were remitted back to 


the Trial Division for new determination. 


Both the Federal Court Trial Division and 
Federal Court of Appeal considered the con- 
stitutionality of section 51 of the Privacy Act, 
which provides for the filing of information 
ex parte with the court and that hearings be 
in camera. Both courts found that the 
section 2(b) Charter infringement caused by 
section st of the Privacy Act is justified under 
section 1 of the Charter. The issues in the 


Supreme Court are: 


Issues in the Appeal 

m Whether section 51 of the Privacy Act 
violates section 7 of the Charter; and if 
so, whether the violation is justified under 


section 1; and 


m Whether the section 2(b) Charter infringe- 
ment caused by section 51 of the Privacy 


Act is justified under section 1. 


Issues in Cross-Appeal 

m Whether the Federal Court of Appeal 
interpreted paragraph 22(1)(b) of the 
Privacy Act so narrowly that government 
institutions will not be able to adequately 
protect the names of sources of informa- 


tion including police informers; and 


m Whether the Federal Court of Appeal 
failed to give adequate consideration to the 
implications of the “mosaic effect” and the 
necessity of interpreting the exempting 
provisions of the Privacy Actin such a man- 
ner as to preserve the government’ ability 
to protect sources, investigative methods 
and techniques and the ability to effec- 


tively enforce the laws of Canada. 


By decision dated June 8, 2000, the Federal 
Court of Appeal held that section 7 of the 
Charter was not engaged since the procedural 
safeguards in section 51 of the Privacy Act 

did not deprive individuals of their liberty 
interest. On section 2(b) of the Charter, the 
Federal Court of Appeal held that section 51 
of the Privacy Act infringed the right to 
freedom of speech, but could be saved as a 
justifiable reasonable limit under section 1 


of the Charter. 


Another issue considered by the court was the 
proper interpretation of paragraph 22(1)(b) of 


the Privacy Act which permits a government 
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institution to refuse access to personal infor- 
mation where the disclosure could reasonably 
be expected to be injurious to the enforce- 
ment of a law of Canada or a province or the 
conduct of lawful investigations. The Federal 
Court of Appeal rejected the argument of the 
Solicitor General and held that paragraph 
22(1)(b) does not authorize a refusal to dis- 
close simply because disclosure could have a 
chilling effect on the investigative process in 
general. The notion of injury in paragraph 
22(1)(b) does not extend beyond injury to a 
specified investigation, either actual or to 


be undertaken. 


Status 

Mr. Ruby sought leave to appeal to the 
Supreme Court of Canada from the decision 
of the Federal Court of Appeal concerning the 
constitutionality of section 51 of the Privacy 
Act. The Solicitor General sought leave to 
cross-appeal from the decision of the Federal 
Court of Appeal regarding the interpretation 
of paragraph 22(1)(b) of the Privacy Act. 
Both applications for leave were granted by 
the Supreme Court of Canada on January 18, 
2001. I applied for leave to intervene in the 
issue concerning paragraph 22(1)(b). I was 
granted leave to intervene on May 25, 2001. 

I will present arguments before the Supreme 
Court of Canada that differ from those of 
both parties. 
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Office of the Commissioner of 
Official Languages (Appellant) 
v. Robert Lavigne (Respondent) 


This case is currently under appeal to the 
Supreme Court. Mr. Lavigne was refused 
access to his personal information contained 
iN witness statements made in the course of 
an investigation conducted by the Office of 
the Commissioner of Official Languages. 
The Office based its refusal of access on the 
exemption in paragraph 22(r)(b) of the 
Privacy Act. 


Mr. Lavigne applied to the Federal Court 
Trial Division under section 41 of the Privacy 
Act for review of the Office’s refusal. The 
previous Privacy Commissioner and I inter- 
vened in support of Mr. Lavigne throughout 
this litigation. Our interventions have been 
successful before both the Federal Court Trial 
Division and the Federal Court of Appeal. 


By decision delivered September 6, 2000, 
from the bench, the Federal Court of Appeal 
ordered the Office of the Commissioner of 
Official Languages to provide Mr. Lavigne 
with his personal information. The Federal 
Court of Appeal relied on two of its previous 
decisions, Rubin v, Canada (Minister of 
Transport) and Ruby v. Canada (Solicitor 
General), confirming that the paragraph 
22(1)(b) exemption can only be invoked 


where there is evidence of injury to a specific 
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investigation, the exemption cannot be 
invoked once an investigation has been 
completed, and one cannot refuse to disclose 
the requested information on the basis that to 
disclose would have a “chilling” effect on pos- 
sible future investigations. The Federal Court 
of Appeal rejected the argument of the Office 
of the Commissioner of Official Languages 
that a different interpretation was justified in 
this case by the statutory mandate of the 


Commissioner of Official Languages. 


The issues in the Supreme Court are whether 
the Court of Appeal erred in finding that the 
access provisions of the Privacy Act override 
the confidentiality provisions of the Official 
Languages Act and whether the decision of the 
Court of Appeal seriously compromises the 
Commissioner of Official Languages’ ability 


to enforce the Official Languages Act. 


Status 

The Office of the Commissioner of Official 
Languages filed an application for leave to 
appeal to the Supreme Court of Canada. 
Leave to appeal was granted on April 19, 2001. 
The Supreme Court of Canada granted me 
leave to intervene in support of Mr. Lavigne 
on August 21, 2001. My submissions as an 


intervener will be filed in early December. 


INTRODUCTION 


HE PASSAGE OF THE 
Personal Information 
Protection and Electronic 

Documents (PIPED) Act is an 
important step forward for Canada. 
It is a clear commitment to protect 
our fundamental right of privacy, in 
an age when it is threatened as never 
before. With technological develop- 
ments revolutionizing the way we 
do business and with organizations 
demonstrating a limitless appetite 
for personal information, progres- 
sive nations around the globe are 
recognizing the need to safeguard 
privacy. The PIPED Act places 


Canada firmly in their front ranks. 


Part [wo 
REPORT ON 

THE PERSONAL 
INFORMATION 
PROTECTION 
AND ELECTRONIC 
DOCUMENTS ACT 


Part 1 of the Act sets out the conditions 

under which organizations may collect, use, 
or disclose personal information, and gives 
individuals rights of access to and correction 
of personal information held about them by 
an organization. It also sets out the process 
by which individuals may lodge a formal 
complaint when they believe these rights have 
been violated or that organizations are not 

in compliance with the law, and the legal 


remedies available to them. 


This part of the Acris being implemented in 
three stages. In the first stage, which began 
on January 1, 2001, the Act applies to personal 
information, except personal health informa- 
tion, collected, used or disclosed in the 


course of commercial activities, or about their 
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employees, by federal works, undertakings 
and businesses. This includes the banks, 

the broadcasting industry, inter-provincial 
transportation companies and the telephone 


companies. 


The Act also applies to disclosures of personal 
information traded or sold across provincial 
or national borders. In addition, it applies to 
the entire commercial sector in the Yukon, 
Northwest Territories and Nunavut, since 

all local businesses in the territories are 
considered to be federal works, undertakings, 
and businesses, and therefore under the 


jurisdiction of the federal Parliament. 


As of January 1, 2002, the Act will apply 
to personal health information for the organi- 
zations and activities already covered in the 


first stage. 


Part 1 of the Act will be in force across Canada 
in the provincially regulated private sector as 
of January 1, 2004, except where a province 
or territory has enacted legislation that the 
Governor in Council considers to be substan- 
tially similar to the Personal Information 
Protection and Electronic Documents Act. In 
these cases, the provincial or territorial legisla- 
tion will apply to intra-provincial collection, 
use or disclosure of personal information by 
organizations subject to the provincial law. 


The federal law will continue to apply to a 
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broad range of interprovincial and interna- 
tional collections, uses or disclosures. That 
means that as of January 1, 2004, the privacy 
rights of Canadians will be protected 
throughout the private sector, either under 
the federal Act or under a substantially 


similar provincial or territorial law. 


As Privacy Commissioner of Canada, I am 
responsible for overseeing compliance with 
the rules for the collection, use, and disclosure 
of personal information set out in Part 1 of the 
Act. I receive and investigate complaints, and, 
as with the Privacy Act, play the role of an 
ombudsman, attempting to resolve disputes 
by negotiation. I also may, with reasonable 
grounds, audit the personal information man- 


agement practices of an organization. 


The powers of investigation granted to 

my Office under the Personal Information 
Protection and Electronic Documents Act mirror 
those contained in the Privacy Act, although I 
have a greatly expanded mandate to conduct 
research into privacy issues, and to promote 
awareness and understanding of these issues 


among Canadians. 


This is an interim report on activities related 
to the Personal [Information Protection and 
Electronic Documents Act covering the period 


from January 1, 2001, to November 30, 2001. 
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UPDATE ON PROVINCIAL AND 
TERRITORIAL LEGISLATION 


Determination of 
“Substantially Similar” 


I will interpret substantially similar as mean- 
ing equal or superior to the federal law in the 
degree and quality of privacy protection 
provided. The federal law is the threshold or 
floor. A provincial privacy law must be at least 


as good, or it is not substantially similar. 


To be considered substantially similar, any 
provincial legislation will have to contain, 

at a minimum, the ro principles set forth 

in Schedule 1 to the Personal Information 
Protection and Electronic Documents Act. 
While we consider all 10 principles of this 
code to be interrelated and equally important, 
I am going to comment on five elements 

of the law as key components in making an 
assessment of substantially similar: consent, 
reasonable person test, access and correction 


rights, oversight, and redress. 


Consent 


To the extent that privacy is the right to 
control access to one’s person and to personal 
information about oneself, there is no control 
without consent and there is no privacy 


without control. 


The requirement for consent must be at 
the heart of any good privacy legislation. 


The federal law says that consent must be 


informed and that the collection, use and 
disclosure of personal information without 
the individual’s consent may occur only in 


specified exceptional circumstances. 


An organization can only collect, use or 
disclose personal information about an indi- 
vidual with the individual’s consent (except 
in certain limited circumstances that are set 


out in the Act.) 


After collection, personal information can 
only be used or disclosed for the purpose for 
which consent was given (except in certain 


circumstances that are set out in the Act.) 


Reasonable Person Test 


The reasonable person test provides another 
important check on organizations. The law 
states that the collection, use, and disclosure 
of personal information must be limited to 
purposes that a reasonable person would 


consider appropriate in the circumstances. 


Among other things, this test prevents 
organizations from using overly broad or 
vague statements of the purposes for which 


information is being collected. 


Access and Correction Rights 


Individuals must have the right to access 
personal information that organizations have 
about them and to correct any information 
that is incorrect (or to have any disagreement 
noted and provided to any party who received 


the information). 
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Oversight 


Where an individual is of the opinion that 
his or her privacy rights have been violated or 
the privacy law not respected, the individual 
must have the ability to complain to a fully 
independent oversight body with the specific 
mandate to resolve complaints, thoroughly 
investigate, mediate, conciliate and make 
recommendations or issue orders. Such an 
oversight body also must have the full range of 
investigative powers to seize documents, enter 
premises, and compel testimony and initiate 


audits of an organization's practices. 


Redress 


Following my report to an organization and a 
complaint, the federal Act allows the com- 
plainant (or myself directly) to apply for a 
hearing in the Federal Court of Canada. The 
complainant or I can ask the court to order 
the organization in question to correct its 
information handling practices and make 
public the steps it has taken to do so. The 
court can be asked to award damages to the 


complainant. 


Decisions of the Federal Court can be 
appealed to the Federal Court of Appeal and 


with leave to the Supreme Court of Canada. 


I believe that there must be corresponding 
redress provisions in any provincial legislation 


which purports to be “substantially similar”. 


7O 


Legislative initiatives to regulate 


the private sector 


To date, Quebec is the only province in 
Canada with personal data protection in 
effect that applies to enterprises operating 

in the province as defined in its Civil 

Code. Elsewhere in Canada, two provincial 
governments — British Columbia and 
Ontario — have begun to explore legislative 
options for the regulation of the collection, 
use, and disclosure of personal information in 
the private sector. This is in preparation for 
the January 1, 2004, date for provincial 
governments to have legislation in place that 
is deemed by the Governor in Council, 
through an exemption order, to be substan- 
tially similar to the Personal Information 


Protection and Electronic Documents Act. 


Health Sector 


The provinces of Alberta, Manitoba and 
Saskatchewan have all passed health-specific 
privacy legislation. The legislation in 
Manitoba and Alberta is currently in force. 
In December 2000, Ontario introduced the 
controversial Bill 159, the Personal Health 
Information Privacy Act. This bill died on the 


order paper. 
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Pusiic SECTOR LEGISLATION 


New Brunswick's Protection of Personal 
Information Act came into force in April 2001. 
Prince Edward Island’s Freedom of Information 
and Protection of Privacy Act received Royal 
Assent on May ts, 2001, and will come into 
force in November 2002. With the introduction 
and passage of these two acts, every province 
and territory in Canada with the exception of 
Newfoundland now has statutory protection 
for personal information held by government 


departments and agencies. 


INVESTIGATIONS 


As of November 30, 2001, my Office had 
received 95 formal complaints under the 
Personal Information Protection and Electronic 
Documents Act. During this first year of the 
Act, these complaints have been confined to 
the federally regulated sector, with nearly 
half of them involving the banks. 


In spite of the lead-in time organizations had 
to prepare for the coming into force of the Acz, 
some still have not embraced its principles in 
their business practices. Many complaints 
have raised systemic issues dealing with the 
violation of privacy rights in the federally 
regulated private sector. Where it was deter- 
mined that they were well-founded, I have 
recommended that organizations make 
important changes to existing policies 


and procedures. 


Section 13 of the Personal Information 


Protection and Electronic Documents Act gives 


me the authority to ask that organizations 
report back on the progress made in imple- 
menting these changes. Experience to date 
suggests that this will be a useful tool to 


ensure the necessary changes are made. 


My approach to the investigation and resolution 
of these complaints is similar to my approach 
under the Privacy Act. When my Office 


receives a complaint, I give the organization 


Complaints by Sector 


January 1, 2001 to 
November 30, 2001 


Internet 
Service 


Other 
Providers 6 


formal notice of the nature of the allegations, 


and invite it to make representations. I try, 
whenever possible, to resolve disputes 
through conciliation, consultation, persuasion 


and mediation. 


Telecommunications 
and broadcasting 
24 


I may make one of the following findings in 


handling a complaint: 


= Not well-founded: This means that there 
is no evidence to lead me to conclude that 


the organization violated the Act. 


= Well-founded: This means that the investi- 
gation revealed that the organization failed 


to respect a provision of the Act. 


= Resolved: This means that the organization 
has taken corrective action to remedy the 
situation, or that the complainant is satisfied 


with the results of my Office's inquiries. 


= Discontinued: This category applies to 
investigations that are terminated before all 
the allegations have been fully investigated. 
A case may be discontinued for any number 
of reasons — for example, when the com- 
plainant is no longer interested in pursuing 


the matter. 
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COMMISSIONER’S FINDINGS 


The following are my findings under the 
PIPED Act up until November 30, 2001. For 
the sake of consistency, the findings are pre- 
sented in the format in which they will appear 
on our Web site at www.privcom.ge.ca. Since 
January 2001 my Office has completed inves- 
tigations and issued findings and recommen- 
dations in the investigation of 27 complaints 
under the Personal Information Protection and 
Electronic Documents Act and two incidents. 
Complaints almost identical in nature have 


been combined and written as one finding. 


Video surveillance activities 

ina public place [Principle 4.3, Schedule1] 
Complaint 
The Information and Privacy Commissioner 
of the Northwest Territories and Nunavut 
complained that a security company had 
improperly collected personal information 
without the consent of individuals by means 


of surveillance cameras installed on the main 


street of Yellowknife. 


Summary of. Investigation 

The security company in question had 
mounted, on the roof of its office building, 
four video cameras aimed down into a main 
intersection of Yellowknife and had set up two 
monitors in its offices. For several days in 
early May 2001, company staff had monitored 
live feed from the street 24 hours a day. On 


several occasions, staff had noted incidents 


72 


and contacted police. By the company’s own 
admission, this surveillance activity had been 
a marketing demonstration intended to gener- 
ate business. On negative publicity, the com- 


pany removed the cameras less than a week 


after they had been installed. 


Commissioner’s Findings 
(Issued June 15, 2001) 


Jurispiction: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to federal works, 
undertakings, or businesses. The Commissioner 
had jurisdiction in this case because any 
company in the Northwest Territories is a 


federal work, undertaking, or business as 
defined in the Act. 


APPLICATION: Principle 4.3, Schedule 1, states 
that the knowledge and consent of the indi- 
vidual are required for the collection, use, or 
disclosure of personal information, except 


where inappropriate. 


Since the company’s principal reason for 
installing video surveillance equipment 

was to monitor the activities of people, the 
Commissioner concluded that the informa- 
tion at issue was personal information for 
purposes of the Act. Since the company 

had admitted that its video surveillance 
activity was a marketing demonstration, the 
Commissioner concluded that the activity 
was a commercial activity within the meaning 


of the Act. 
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The fact that the video feed was live and not 
taped, was deemed not relevant, since the 

Act does not restrict personal information to 
recorded information. On the evidence, the 
Commissioner was satisfied that individuals 
had not consented to the collection. He found 
that the company had collected personal 
information without consent in contravention 


of Principle 4.3. 


In presenting his findings, the Commissioner 
commented as follows: “There may be 
instances where it is appropriate for public 
places to be monitored for public safety reasons. 
But this must be limited to instances where 
there is a demonstrable need. It must be 
done only by lawful public authorities and it 
must be done only in ways that incorporate 
all privacy safeguards set out by law. There is 
no place in our society for unauthorized 
surveillance of public places by private sector 


organizations for commercial reasons.” 


The Commissioner concluded therefore that 


the complaint was well-founded. 


FURTHER CONSIDERATIONS 

No further action was required in respect of 
the complaint, since the company had already 
removed the cameras before the Commissioner 
issued his findings. However, the matter 

was not fully resolved, in that the security 
company indicated an intention to pursue its 
efforts to provide video surveillance services to 
the Yellowknife community. The Commissioner 


has advised the company that its intended 


public video surveillance for commercial pur- 


poses is unlawful and should not be pursued. 


Unsolicited e-mail from an Internet 

service provider [Principle 4.3, Schedule1] 
Complaint 
A customer complained that her Internet 
service provider (1sP) was using her personal 
information, namely her e-mail address, 
without her consent by sending unsolicited 


e-mail notices to her. 


Summary of Investigation 

The complainant had received several unso- 
licited e-mail notices from her tsp about its 
services. At first she complained directly to 
the isp, but was not satisfied with the com- 
pany’s suggestion that she simply reconfigure 
her browser so as to route the notices directly 
to a bulk-mail or trash-bin folder. Her position 
was that the onus should not be on the user to 
filter unsolicited e-mail notices from the Isp. 
The company’s position was that it had a right 
to send such messages under the terms and 
conditions of its subscriber agreement, which 


contains a consent clause. 


Since the initial one-year subscription had 
been a gift from a friend, the complainant had 
not personally considered these terms and 
conditions at the start of her service, but had 
subsequently been presented with them on 
renewing her subscription after a year. The 
complainant did renew her subscription with 
the same company even though her complaint 


remained unresolved at the time. 
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Commiussioner’s Findings 


(Issued July 3, 2001) 

Jurispicrion: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to federal works, 
undertakings, or businesses. The Commissioner 
had jurisdiction in this case because Internet 
service providers are federal works, undertak- 


ings, or businesses, as defined in the Act. 


APPLICATION: Principle 4.3, Schedule 1, 
states that the knowledge and consent of the 
individual are required for the collection, use, 
or disclosure of personal information, except 


where inappropriate. 


On reviewing the subscriber agreement of the 
IsP in question, the Commissioner was satis- 
fied that the company’s practice of sending 
periodic e-mail notices to customers was 
clearly outlined in the agreement. Hence, he 
considered it reasonable that customers would 
expect to receive such notices from time to 
time. Moreover, he determined that the 
complainant had consented to the practice 

on renewing her subscription. He found that 
in this case the sp had not contravened 


Principle 4.3. 


The Commissioner concluded therefore that 


the complaint was not well-founded. 


FURTHER CONSIDERATIONS 
The Commissioner informed the complainant 
that he considered the tsp’s initial proposal for 


resolving her concern to have been reasonable. 
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He also commented: “The e-mail notices are 
in keeping with the purposes for which con- 
sent to use the e-mail address was originally 


obtained, that is, to enable efficient isp service.” 


Commissioner considers jurisdiction 

over third-party disclosure by bank subsidiary 

[Section 30] 
Complaint 
A customer complained that an investment 
company, a subsidiary of a chartered bank, 
had improperly disclosed to a third party, 
namely a regulatory body that oversees the 
company’ activities, his personal information 


related to financial transactions. 


Summary of. Investigation 
The investigation in this case was limited to 
the Commissioner’s determination of whether 


or not he had jurisdiction in the matter. 


Commissioner’s Findings 


(Issued July 19, 2001) 

Jurispiction: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies strictly to federal 
works, undertakings, or businesses and to 
transborder disclosures of personal informa- 
tion for consideration. Banks are federal 
works, undertakings, or businesses as defined 
in the Act. In this case, however, the invest- 
ment company, though a subsidiary of a 
bank, operates as a separate and distinct legal 
entity, does not disclose information across 


borders for consideration, and is provincially 
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regulated. The company in question is not 


currently subject to the Acz. 


The Commissioner concluded that he 


lacked jurisdiction. 


Bank customer requests 

credit score information 

[Principle 4.9, Schedule 1, and section 8] 
Complaint 
A customer complained that a bank had 
denied her access to her personal information 


regarding her credit score. 


Summary of Investigation 

The complainant had telephoned her branch 
of the bank in question and asked for her 
credit score information. A customer service 
representative at the branch advised her that 
the bank did not release such information to 
its customers. On being informed of this 
complaint, the bank undertook an extensive 
search of its records and subsequently reported 
that it could not find any credit product or 
credit application in the complainant's name 
and therefore had no corresponding credit 
score for her. The complainant subsequently 
confirmed that she had no credit products 
with the bank and had never submitted any 


credit application to the bank. 


Commissioner's Findings 


(Issued July 23, 2001) 

Jurispiction: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to federal works, 


undertakings, or businesses. The Commissioner 


had jurisdiction in this case because financial 
institutions are federal works, undertakings, 


or businesses as defined in the Acz. 


AppLicaTIon: Principle 4.9, Schedule 1, states 
that upon request an individual must be 
informed of the existence, use, and disclosure 
of his or her personal information and be 
given access to that information. Section 8 sets 
out conditions under which a request may be 


deemed to have been refused. 


The Commissioner was satisfied that the 
requested information did not exist in the 
bank’s files. He found therefore that the 
complainant had not been denied a right of 
access to her personal information under 


section 8 of the Act. 


The Commissioner concluded that the 


complaint was not well-founded. 


Personal information retained 

after application rejected 

[Principle 4.5, Schedule1] 
Complaint 
A credit card applicant complained that, after 
turning down her application, a bank had 
refused her request that the personal informa- 
tion collected for her application be deleted 


from the bank’s records. 


Summary of Investigation 

The complainant had applied in person for a 
credit card, but the bank in question had 
declined her application. The complainant 


then requested that the personal information 
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she had provided in her application be 
removed from the bank’s computer system. 
The branch manager replied that he himself 
did not have the delegated authority to 
remove the information, and he took no steps 
to determine whether some other course 


could be taken. 


In fact, the bank’s corporate privacy officer 
and the business manager for the credit cards 
had the delegated authority for removal of 
such information on special request, but in 
this case the complainant’s request was not 
relayed to either of these officials. For credit 
card applications made in person, the bank’s 
usual practice was to enter the personal 
information collected immediately into the 
computer system at the branch and then 
forward it for adjudication to the host 
computer system of the bank’s central loan 
processing centre. If the application was 
declined, the information was not automatically 
purged. Unless the unsuccessful applicant 
made a special request for removal, the 
personal information remained in the 

bank’s computer system and was accessible 


indefinitely at the branch level. 


Commiusstoner’s Findings 


(Issued July 23, 2001) 

Jurispiction: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to federal works, 
undertakings, or businesses. The Commissioner 


had jurisdiction in this case because banks are 
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federal works, undertakings, or businesses, as 


defined in the Act. 


APPLICATION: Principle 4.5, Schedule 1, states 
that personal information must be retained 
only as long as necessary for the fulfillment of 


the purposes for which it was collected. 


The Commissioner considered it unreasonable 
that, after the bank had used the complainant's 
personal information for the purpose for 
which it had been collected (i.e., making the 
decision about the credit card), the information 
would have remained accessible indefinitely 
at the branch level had the complainant not 
insisted on its removal. He found that the 


bank in this case had contravened Principle 4.5. 


However, the Commissioner also noted that 
the bank had subsequently deleted the 
complainant’s personal information and had 
confirmed that it had not been communicated 
to any third party. He also noted that the 


complainant was satisfied with this resolution. 


The Commissioner concluded therefore that 


the complaint was well-founded and resolved. 


FURTHER CONSIDERATIONS 

‘To address the inconsistencies revealed by the 
Commissioner’s investigation, the bank in 
question has agreed to undertake an extensive 
review of its current practices for the retention 
of personal information. The bank has also 
agreed to implement a communications strat- 
egy for educating employees and customers on 


the bank's privacy complaints process. 
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Security of a bank’s automated 

telephone service [Principle 4.7, Schedule1] 
Complaint 
Citing several provisions of the Personal 
Information Protection and Electronic 
Documents Act, an individual complained that 
a bank was not taking adequate security 
measures to safeguard customers’ information 


disclosed via its automated telephone service. 


Summary of Investigation 

The bank in question offers an automated 
telephone service for Visa customers who do 
not have other dealings with the bank. Users 
of this service cannot conduct transactions, 
but can gain limited access to their Visa 
account information by providing the 16-digit 
Visa account number and, at the random 
selection of the system, either the last four 
digits of the cardholder's home telephone 


number or the cardholder’s year of birth. 


Commissioner's Findings 


(Issued July 23, 2001) 

JurrspIcTIon: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to federal works, 
undertakings, or businesses. The Commissioner 
had jurisdiction in this case because banks are 


federal works, undertakings, or businesses, as 


defined in the Act. 


AppLicaTIon: Principle 4.7, Schedule 1, states 
that an organization must protect personal 
information by security safeguards appropriate 


to the sensitivity of the information. 


On consideration, the Commissioner deemed 
the complainant’s concern to be valid. He 
determined that a coding procedure relying so 
much upon a cardholder’s telephone number 
or year of birth was not adequate to prevent 
unauthorized persons from gaining access to 
users’ sensitive personal information. He 
found that the bank in question was not in 


compliance with Principle 4.7. 


Nevertheless, the Commissioner noted 

that the bank had proposed and initiated a 
detailed three-phase action plan to address 
the security concerns raised in the complaint. 
He also noted both he and the complainant 


found all aspects of this plan satisfactory. 


The Commissioner concluded therefore 
that the complaint was well-founded 


and resolved. 


FURTHER CONSIDERATIONS 
The action plan proposed by the bank 


comprises three-phases as follows: 


Immediate: All automated access to the 
complainant's Visa account 1s disabled, so that 
any unauthorized attempt to obtain the com- 
plainant’s personal information will fail. The 
complainant himself will be able to access his 
account through an agent by reference to a 


preselected password. 


Short-term: By October 31, 2001, the bank's 
Visa-only customers will be allowed to disable 
their automated telephone access upon 


request and likewise deal directly with an 
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agent, if they so choose. This phase includes 
a communications strategy for informing 


the customers. 


Long-term: The bank has agreed to implement 
a new telephone bank solution addressing the 
privacy and security concerns of customers 
within three years and to report on progress 
to the Privacy Commissioner no later than 


July 31, 2002. 


The Commissioner has commented: “I am 
satisfied that the measures [the bank] has put 
in place to resolve the security safeguard issues 


identified ... are acceptable.” 


Musician objects to collection of 
salary information by professional 
organization [Section 2] 
Complaint 
A musician complained that the professional 
organization representing his interests had, 
without his consent, collected personal infor- 
mation about him, namely his annual salary, 


from his employer. 


Summary of Investigation 

The complainant is the only musician work- 
ing in a certain establishment. One of the 
activities of the professional organization in 
question is to collect copyright dues for its 
members, subject to the requirements of the 
Copyright Act. In order to file the applicable 
tariff with the Copyright Board and collect 
the copyright dues, the organization first 


needs to know the total entertainment budget 
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of a given establishment. The complainant 
was concerned that, since he was the only 
musician at the establishment in question, a 
third-party might be able to identify him as 
the sole recipient of the salary allotment 
included in the entertainment budget. 
However, in collecting such information, the 
organization has no interest in knowing which 
musicians or how many are working in the 
establishment and therefore does not collect 
names or numbers. Nor does it publish or 
communicate to third parties the information 


it collects in respect of the establishment. 


Commissioner’s Findings 


(Issued July 23, 2001) 

Jurispiction: The professional organization 
in question stated that it was subject to the 
Personal Information Protection and Electronic 
Documents Act. The Commissioner did not 


dispute this position. 


APPLICATION: Section 2 of the Act defines 
personal information to be “... information 


about an identifiable individual ...”. 


On the evidence, the Commissioner was satis- 
fied that the professional organization had the 
legal authority to collect the information at 
issue and that the collection did not involve 
personal information about an identifiable 
individual. He found that the collection was 


therefore not subject to the requirements of 


the Act. 


The Commissioner concluded that the 


complaint was not well-founded. 
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FURTHER CONSIDERATIONS 

In conveying his findings, the Commissioner 
commented: “Having established that the 
information collected is not personal, I need 
not make a finding on its appropriateness 
with respect to sections 4.3 (consent) and 4.4 
(limiting collection) of Schedule 1 or to 
section 7 (collection without knowledge or 
consent) of the Act, which might otherwise 


have applied in this case.” 


Use and disclosure of personal information 
in telephone directories 
[Principle 4.3, Schedule1] 
Complaint 
Citing several provisions of the Personal 
Information Protection and Electronic 
Documents Act, an individual complained 


that a telecommunications company was: 


1. Using and disclosing customers’ personal 
information without their knowledge and 
consent by publishing names, addresses, 
and telephone numbers in the company’s 
white-pages directory and on two Web 


sites; and 


2. Inappropriately charging customers 


for opting not to have their information 


published. 


Summary of Investigation 

The telecommunications company in question 
publishes customers’ names, addresses, and 
telephone numbers in its white-pages directory 


and on its own directory assistance Web site. 


In accordance with Canadian Radio-television 
and Telecommunications Commission (CRTC) 
regulations, the company gives the same 
information to the Bell Canada subsidiary 
that operates the “Canada 411” Web site. 
Customers are asked how they wish their per- 
sonal information to appear in the company’s 
white pages and are given the option of not 
having their information published. For those 
who choose non-publication, the company 
charges fees, in accordance with cRrrc regula- 
tions. The company also provides list services 
to selected organizations for a fee, excluding 
information on non-published customers and 


customers who ask to be de-listed. 


Commissioner's Findings 
(Issued August 14, 2001) 


Jurispiction: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to federal works, 
undertakings, or businesses. The Commissioner 
had jurisdiction in this case because telecom- 
munications companies are considered to be 


federal works, undertakings, or businesses, as 


defined in the Act. 


Appication: Principle 4.3, Schedule 1, 
states that the knowledge and consent of the 
individual are required for the collection, use, 
or disclosure of personal information, except 


where inappropriate. 


On the matter of consent, the Commissioner 
considered relevant the company’s questioning 
of customers regarding how their information 


should appear in the white-pages directory. 
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He determined that the question itself implies 
the eventual appearance of the information in 
publicly available directories. By choosing 
not to take the option of non-publication, 
customers implicitly give consent for their 
personal information to be made available to 
the public. Moreover, since the information 
subsequently published in other formats 
merely reflects what is published in the 
white-pages directory, it too is considered 
publicly available information for purposes of 
the regulations under the Act and may be 
collected, used, or disclosed without consent. 
In sum, the Commissioner found that the 
company did obtain valid consent and was 

in compliance with regulations on publicly 


available information. 


On the matter of charging fees for non- 
publication of customers’ information, the 
Commissioner noted that the company had 
duly applied for and received permission from 
the crrc, under Telecom Order 98-109, which 
states that telecommunications companies 
can charge no more than $2 per month for 
non-published telephone service. He founded 
therefore that the company in question did 
have authority to charge its monthly fee of 


$2 for non-publication. 


The Commissioner concluded that the 


complaint was not well-founded. 
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Bank teller writes 

account number on cheque [Section 5(3)] 
Complaint 
An individual complained that a bank had 
created the potential for an improper disclosure 
of his personal information to a third-party 
without his consent when a teller wrote his 
account number on the back of a cheque 


when cashing it. 


Summary of Investigation 

The complainant had gone to a branch of his 
bank to cash a personal cheque from a third 
party. The bank teller wrote the complainant's 
account number on the back of the cheque. 
The complainant’s concern was that, if the 
cheque was for any reason returned to the 
third party who had written it, the account 


number would be disclosed to that person. 


The bank argued that, in cashing cheques, 
banks are in effect extending credit until 

such time as the cheque’s value can be debited 
from the cheque-writer’s account. In cases of 
exception (e.g., fraud or insufficient funds), 
banks require an efficient means of recovering 
the cheque value from the customer who 
presented the cheque. Moreover, names 
written on the front of cheques are not an 
efficient enough means, in that they may 
vary significantly from the exact names in 
which customers’ bank accounts are regis- 
tered. This bank’s position was that recording 
account numbers on cheques is a longstanding 


industry-wide practice, necessary for protecting 
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a bank’s interests in ensuring that it can 
collect its money from either the cheque- 
writer or the person who deposits or cashes 


the cheque. 


Commissioner’s Findings 
(Issued August 14, 2001) 


JurispicTIon: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to federal works, 
undertakings, or businesses. The Commissioner 
had jurisdiction in this case because banks are 


federal works, undertakings, or businesses as 


defined in the Act. 


APPLICATION: Section 5(3) states that an 
organization may collect, use or disclose 
personal information only for purposes that a 
reasonable person would consider are appro- 


priate in the circumstances. 


The Commissioner determined that the 
bank’s recording of the account number at 
the time a cheque is presented is a reasonable 
practice and that it is reasonable for a 
customer to expect such practice. The 
Commissioner was satisfied that the com- 
plainant had thus given implied consent to 
the collection, use, and disclosure of his 
personal information. The Commissioner 


found that no contravention of the Act had 


been established. 


He concluded therefore that the complaint 


was not well-founded. 


FURTHER CONSIDERATIONS 

In presenting his findings, the Commissioner 
commented as follows: “Upon presenting the 
cheque for negotiation, the [bank’s] customer 
is giving implied consent for the disclosure of 
the personal information on the back, just as 
the drawee is providing express consent to 
disclosure of their personal information (on 


the front of the cheque) to the payee.” 


Trucking company collects personal 
_ information intended for Canada Customs 
[Principle 4.4, Schedule 1] 
Complaint 
A dismissed employee complained that his 
former employer, an international trucking 
company, had improperly attempted to collect 
personal information by insisting that he 
complete and return to the company an appli- 
cation for a program instituted by the Canada 


Customs and Revenue Agency (CcRA). 


Summary of Investigation 

The trucking company in question had sent 
the complainant, one of its international drivers, 
a letter advising that he was required to 
complete a “Commercial Driver Registration 
Application” under the new Customs Self- 
Assessment Program instituted by the ccra. 
This letter also advised that the driver was to 
return the completed application to the com- 
pany itself: The complainant refused, not 
wishing his employer to have access to the 
personal information he was required to pro- 


vide on the application. The company sent 
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him a second letter ordering him to complete 
and return the application by a given date or 
else be disciplined under the collective 
agreement and have his employment placed 
in jeopardy. The complainant again did not 
comply, and the company terminated his 
employment five days after the given date. 
According to the company, the ccra expected 
employers to gather applications and submit 
them to the ccra on their drivers’ behalf. In 
fact, the ccra clearly instructs, on both the 
application form and the program pamphlet, 
that drivers submit their completed applica- 
tions directly to the ccra’s processing centre 


in Niagara Falls. 


Commissioner's Findings 
(Issued August 17, 2001) 


Jurispiction: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to federal works, 
undertakings, or businesses. The Commissioner 
had jurisdiction in this case because inter- 
provincial trucking companies are federal 
works, undertakings, or businesses as defined 


in the Act. 


APPLICATION: Principle 4.4, Schedule 1, states 
that collection of personal information must 
be limited to that which is necessary for the 
purposes identified by the organization and 
that information must be collected by fair and 


lawful means. 
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The Commissioner determined that, 
although it was necessary for a driver to 
complete an application for the Customs 
Self-Assessment Program and return it to the 
CCRA, it was not necessary or appropriate for 
the company itself to collect the information. 
He also determined that threatening employees 
with loss of their jobs was not a fair means of 
collection. He found that the company was 


not in compliance with Principle 4.4. 


The Commissioner noted that the company 
had been prompt in changing its policy so as 
no longer to require its drivers to return their 
applications to the company. Nevertheless, 
he did not consider the complaint to have 
been resolved, pending reinstatement of the 
complainant with the company and compen- 
sation for any damages. The Commissioner 
expressed his intention to pursue these mat- 


ters with the company. 


The Commissioner concluded that the 


complaint was well-founded. 


FURTHER CONSIDERATIONS 

The complainant subsequently informed the 
Commissioner that a settlement regarding the 
termination of his employment had been 
reached through arbitration and that he 
considered the complaint to have thus been 


satisfactorily resolved. 
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Bank loses customer's personal information 

[Principle 4.7, Schedule 1, and section 12(2)] 
Complaint 
A customer complained that a bank had 
failed to protect her personal information 
when documents containing her Social 
Insurance Number (stn), name, address and 
unlisted telephone number were lost during a 


transfer between offices. 


Summary of Investigation 

Human Resources Development Canada had 
issued the complainant a new sIN after her 
discovery that her old one had been used 
fraudulently. She later completed forms that 
her bank required for updating her investment 
account information with the new sIN. She 
gave the completed forms to staff at a local 
branch office of the bank for transfer to the 
office of the subsidiary that manages the 
investment account. The documents were lost 


during the transfer. 


Commissioner's Findings 
(Issued September 7, 2001) 


Jurispiction: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to federal works, 
undertakings, or businesses. The Commissioner 
had jurisdiction in this case because banks 


are federal works, undertakings, or businesses 


as defined in the Act. 


App ication: Principle 4.7, Schedule 1, states 
that personal information must be protected 
by security safeguards appropriate to the sensi- 
tivity of the information. Section 12(2) states 
that the Commissioner may attempt to 
resolve complaints by means of dispute 
resolution mechanisms such as mediation 


and conciliation. 


At the outset of the Commissioner's investiga- 
tion, the parties indicated an interest in 
resolving the matter. Discussions ensued, 

and a settlement satisfactory to both parties 
eventually resulted. Furthermore, the 
Commissioner was satisfied that the bank 

in question had taken steps to ensure that 
appropriate safeguard policies, practices, and 


procedures were in place. 


The Commissioner concluded therefore that 
the complaint was resolved and no further 


action necessary. 


FURTHER CONSIDERATIONS 

Both the complainant and the bank 
expressed satisfaction with the role that the 
Commissioner’s Office had assumed in 


settling this matter. 
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Credit card applicant objects 

to bank’s information-sharing policy 
Complaint 
An individual complained that a bank was 
refusing to process his credit card application 
because he would not consent to the bank’s 


information-sharing policy. 


Summary of Investigation 

In filling out an application for a credit card, 
the complainant had marked up the terms 
and conditions by hand. His intention in 
doing so had been to indicate his disagree- 
ment with the bank’s stated policy of sharing 
personal information and to exercise the 
option of not having his personal information 
shared and not receiving the bank’s direct 
marketing service. The bank subsequently 
advised him by letter that it was unable to 
process his application as submitted because 
the legal wording had been amended. The 
complainant interpreted this letter as being a 
refusal on the bank’s part to issue a credit card 
unless he authorized its information-sharing 
policy. In a second letter, the bank assured the 
complainant that applicants did have the right 
to opt out of the direct-marketing service and 
that his own application had been returned to 
him simply because he had altered it. The 
bank also offered to reconsider his credit card 
application and at the same time to remove his 
name from its direct-marketing and shared- 


marketing lists. The complainant agreed. 
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On being finally issued a credit card, the 
complainant pronounced himself satisfied 
with the bank’s response and indicated that 
his complaint file the Office could be closed. 


Accordingly, this complaint was discontinued. 


Bank accused of withholding bond certificates 
[Principle 4.9, Schedule 1; and section 8] 
Complaint 
An individual complained that a bank had 
denied her access to her personal information 
in the form of two “Small Business Bonds” 
that she believed the bank was holding under 


her name. 


Summary of Investigation 

The complainant specified that the documents 
she was seeking were the paper versions or 
certificates of two “Small Business Bonds”. In 
1982, the complainant and her spouse had 
consolidated their outstanding indebtedness 
to the bank in question under the Small 
Business Bond (sss) Program, a federal gov- 
ernment initiative that provided interest relief 
for borrowers. The bank had advised the com- 
plainant as early as 1984 that “Small Business 
Bond” was only a term used and that the only 
actual document signed in respect of the sBB 
Program was a form entitled “Election in 
Respect of an sBB”. Both the bank and 
Industry Canada have confirmed that this 
form was the only document directly related 
to the program; no actual paper versions or 


certificates of sBBs had ever existed. In 1998, 
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during a lawsuit over the complainant's 
defaulting on her loan agreement, the bank 
had been obliged to disclose to the complainant 
and her lawyer all documents it held in rela- 
tion to her involvement in the sBB Program. 
The complainant received her signed 
“Election in Respect of an sBB” form at that 


time and was still in possession of it when she 


filed her complaint with the Office. 


Commiussioner’s Findings 
(Issued September 18, 2001) 


JurispicTIon: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to federal works, 
undertakings, or businesses. The Commissioner 
had jurisdiction in this case because banks are 
federal works, undertakings, or businesses as 


defined in the Act. 


AppLicaTIon: Principle 4.9, Schedule 1, states 
that upon request an individual must be 
informed of the existence, use, and disclosure 
of his or her personal information and be 
given access to that information. Section 8 
sets out conditions under which a request 


may be deemed to have been refused. 


The Commissioner found no evidence of the 
existence of sBB-related documents other than 
those already received by the complainant. 
Satisfied that the documents sought by the 
complainant did not exist, he found that 

the bank had not refused the complainant a 


right of access. 


The Commissioner concluded therefore that 


the complaint was not well-founded. 


Selling of information on physicians’ 
prescribing patterns [Sections 2 and 3] 
Two Complaints 
In two separate complaints an individual and 
a physician complained that the Canadian 
arm of a U.S.-based international marketing 
firm was improperly disclosing personal 
information by gathering and selling data 
on physicians’ prescribing patterns without 


their consent. 


Summary of Investigation 

The marketing firm in question gathers, from 
pharmacies and other Canadian sources, 
information related to medical prescriptions. 
The accumulated information includes 
names, identification numbers, telephone 
numbers, and prescribing details of physicians. 
This information is transferred to the firm's 
processing centre in the U.S., where the firm 
produces customized information products. 
These products typically identify physicians in 
a given territory and rank them, either indi- 
vidually or in groups, by monthly prescribing 
activity for various types or classes of drugs. 
The information products are then transferred 
to the firm’s Montreal operation, where they are 
disclosed to clients for a fee. Pharmaceutical 
sales representatives from several Canadian 


provinces regularly buy these products. 
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Commissioner's Findings 
(Issued September 21, 2001) 


JurispicTion: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to any information 
disclosed outside a province for consideration. 
Since the information at issue was regularly 
transmitted across borders, the Commissioner 
determined that it was information disclosed 
outside a province for consideration and 
therefore that he was required to receive and 


investigate the complaint. 


APPLICATION: Section 2 of the Act defines 
personal information as “information about 
an identifiable individual, but does not 
include the name, title or business address or 
telephone number of an employee of an 
organization. Section 3 of the Act sets out 
the Act's purpose in terms of balancing the 
individual’s right of privacy with the need 

of organizations to collect, use, or disclose 
personal information for purposes that a 


reasonable person would consider appropriate. 


The primary consideration for the Commissioner 
was whether the information at issue was 
personal information within the meaning, 
scope, and purpose of the Acz. In making this 
determination, the Commissioner took the 
view that the meaning of “personal informa- 
tion’, though broad, is not so broad as to 
encompass all information associated with an 
individual. An individual prescription, though 
potentially revealing about a patient, is not in 


any meaningful sense about the prescribing 


86 


physician as an individual. Rather, it is about 
the professional process that led to its issuance 
and should be regarded as a work product — 
that is, the tangible result of the physician's 


work activity. 


The Commissioner determined that interpret- 
ing “personal information” so broadly as to 
include prescriptions or prescribing patterns 
would not fulfil the purpose set out in 

section 3 of the Act (see above). Specifically, 

it would not be reasonable to extend the 
definition to prescriptions, lest it be extended 
also to other work products such as legal 
opinions or documents written in the course 
of employment. Nor would it be reasonable to 
extend the definition to prescribing patterns, 
lest it be extended also to patterns discoverable 
among other types of work products and thus 
preclude many kinds of legitimate commercial 


consumer reporting. 


In sum, the Commissioner found that pre- 
scription information, whether in the form of 
an individual prescription or in the form of 
patterns discerned from many prescriptions, is 


not personal information about a physician. 


The Commissioner concluded therefore that 


the complaints were not well-founded. 


FURTHER CONSIDERATIONS 

Because of widespread public interest in the 
case, the Commissioner published his 

letter of findings as a press release, dated 


October 2, 2001. 
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Estate executor disappointed in search for 
safety deposit box information 
[Principles 4.5, 4.9, Schedule 1; and section 8(7)] 


Complaint 

An estate executor complained that a bank 
had refused his request for personal informa- 
tion relating to the safety deposit box of his 


deceased aunt. 


Summary of Investigation 

The complainant suspected that a certain 
unauthorized person had, with help from the 
estate’s lawyers, gained access to the deceased 
aunt’s safety deposit box and removed items 
of value. The complainant had obtained a 
piece of evidence (i.e., a negative reply by fax 
from one branch of the bank) strongly sug- 
gesting that the bank had received at least 


one independent inquiry from the lawyers 


concerning the bank holdings of the deceased. 


In his capacity as estate executor, the com- 
plainant asked the bank for access to the 
signature card for the safety deposit box and 
to any correspondence between the bank and 
the estate’s lawyers. The bank responded that 
it could locate neither the card nor any such 
correspondence. An exhaustive search of the 
bank files, involving the bank’s own ombuds- 
man, the Canadian Banking Ombudsman, 
and the Office of the Privacy Commissioner, 
proved unsuccessful in locating any of the 


information sought by the complainant. 


Normally, the bank keeps safety deposit box 


signature cards for seven years. All the safety 


deposit boxes had been transferred from one 
branch of the bank to another eight days after 
the aunt’s death, but appropriate security 
measures had been taken during the transfer. 
It was not bank policy for a branch to keep 
records of an account, an investment, or a 
safety deposit box once transferred to another 
branch. Nor was it bank policy for a branch 
to keep requests for information pertaining to 


a file it no longer held. 


Commissioner's Findings 
(Issued October 12, 2001) 


Jurispiction: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to federal works, 
undertakings, or businesses. The Commissioner 
had jurisdiction in this case because banks are 


federal works, undertakings, or businesses as 


defined in the Act. 


AppLicaTIoNn: Principle 4.9, Schedule 1, 

states that upon request, an individual shall be 
informed of the existence, use, and disclosure 
of his or her personal information and shall be 
given access to that information. Section 8(7) 
states that an organization that responds 
within the time limit and refuses a request 
shall inform the individual in writing of the 
refusal, setting out the reasons and any 


recourse that they may have under this part. 


The Commissioner determined that the 
information the bank could not produce 
should have been retained in accordance with 


Principle 4.5 or should not have been lost. 
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He therefore found that the bank had not 
complied with Principle 4.9. He also found 
that the bank’s response constituted a refusal 


under section 8(7). 


The Commissioner concluded therefore that 


the complaint was well-founded. 


FURTHER CONSIDERATIONS 

The Commissioner recommended that the 
bank revise its practices concerning the 
destruction of documents containing personal 
information and develop a written policy on 
the retention of such documents in confor- 


mance with the relevant provisions of the Act. 


Employee alleges non-consensual disclosure 

by employer to investment firm [Section 7(3) 

and Principles 4.3 and 4.5, Schedule 1] 
Complaint 
An employee of a large corporation com- 
plained that his employer was improperly 
disclosing his and other employees’ personal 
information, including information related to 
cash bonuses, without the employees’ consent 
or prior knowledge, to the investment firm 
involved in an rRsP and savings plan spon- 


sored by the corporation. 


Summary of Investigation 

The corporation in question has admitted that 
it discloses employees’ personal information 
without their explicit consent to the invest- 
ment firm involved in its RRsP and savings 


plan for hourly employees. The information 
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disclosed consists of the individual's payroll 
and personal identification numbers, name, 
address, social insurance number, marital 
status, gender, preferred language, seniority 
service date, birth date, department, group 
code, and union code. The corporation also 
informs the investment firm when it awards 
cash bonuses, but does not specify the recipi- 
ent or the amount of the bonus. The rrsp and 
savings plan was established by the corpora- 
tion in fulfillment of a commitment under its 
collective agreement with the employees’ 
union. The corporation pays the investment 
firm for the services it provides under the plan 
and does not disclose the information to the 
investment firm for consideration, monetary 


or otherwise. 


Commissioner's Findings 
(Issued October 18, 2001) 


JuRIspDIcTION: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies strictly to federal 
works, undertakings, or businesses or to 
disclosures of personal information across 
borders for consideration. The corporation in 
question is neither a federal work, undertaking, 
or business as defined in the Act, nor does it 
disclose the personal information at issue 


across borders for consideration. 


The Commissioner concluded that 
he lacked jurisdiction to pursue the 


matter further. 
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Requester alleges non-receipt 

of credit report from agency [Section 8] 
Complaint 
An individual complained that a credit- 
reporting agency refused his request to 


disclose his credit report to him. 


Summary of Investigation 

The complainant had written to the credit 
reporting agency to request access to any 
credit report the agency held on him. In his 
complaint, he alleged that he did not subse- 
quently receive a response from the agency. 
The agency’s consumer relations centre has a 
staff of six who are responsible for receiving 
and processing access requests according to 
standard procedures. By those procedures, a 
client request is not filed unless it has been 
matched to a credit report that has either 
been mailed or handed to the client. The 
centre does have on file a copy of the com- 
plainant’s access request, with a handwritten 
notation to the effect that a response was 
mailed to the complainant’s correct address 
13 days after receipt of the request. The 
mailing of a response was also confirmed 
by reference to a computerized log and a 
computer-generated audit report. The com- 


plainant at one point allowed the possibility 


of having merely overlooked the credit report 


on receiving it. Later he declared it highly 


unlikely that he had received the report with- 


out noticing it. 


Commissioner’s Findings 
(Issued October 26, 2001) 


Jurispiction: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to disclosures of 
personal information across borders for con- 
sideration. The Commissioner had jurisdiction 
in this case because the credit reporting 
agency in question had disclosed personal 


information across borders for consideration. 


APPLICATION: section 8(3) of the Act states 
that an organization shall respond to a request 
with due diligence and in any case not later 
than 30 days after receipt of the request. 
Section 8(5) states that if the organization fails 
to respond within the time limit, the organi- 


zation is deemed to have refused the request. 


The Commissioner found no reason to doubt 
the evidence that the credit-reporting agency 
had received the complainant's access request 
and mailed a response within the time limit 
prescribed. He found that the agency had 
complied with section 8(3) of the Act. 


The Commissioner concluded that the 


complaint under section 8(5) was not 


well-founded. 
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Airline accused of refusing access to personal 
information about vacation incidents 
[Principles 4.1 and 4.9, Schedule1] 
Complaint 
Three air travellers complained that an airline 
company had denied them access to personal 
information about their experiences during a 


Mexican vacation. 


Summary of Investigation 

The complainants had requested access to all 
personal information the airline and its travel 
affiliate held regarding certain incidents they 
had experienced during a vacation in Mexico. 
A representative responded initially that the 
company was under no obligation to provide 
such information. On being advised of its 
obligations under the Personal Information 
Protection and Electronic Documents Act by 
the Office of the Privacy Commissioner, the 
company took immediate action to appoint 
an official to be accountable for compliance 
with the Act, processed the complainants’ 
access request, and sent them the personal 
information requested. On reviewing this 
information, the complainants were of the 
opinion that the company had not included 
incident reports. The investigator for the 
Privacy Commissioner examined the company’s 
original files containing the complainants’ 
personal information, but found no evidence 
of information other than that which the 
complainants had already received. The 


company confirmed in writing that it did 
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not have in its possession any additional 
information about the complainants, including 
incident reports. 

Commissioner's Findings 

(Issued October 31, 2001) 

JurispicTion: As of January 1, 2001, the 
PIPED Act applies to federal works, undertak- 
ings, or businesses. The Commissioner had 
jurisdiction in this case because airlines are 


federal works, undertakings, or businesses, as 


defined in the Act. 


APPLICATION: Principle 4.1, Schedule 1, 

states that an organization is responsible for 
personal information under its control and 
shall designate an individual or individuals - 
who are accountable for the organization's 
compliance with [the principles in] Schedule tr. 
Principle 4.9 states that upon request, an 
individual shall be informed of the existence, 
use, and disclosure of his or her personal 
information and shall be given access to 


that information. 


Regarding Principle 4.1, the Commissioner 
determined that the airline company had not 
designated an individual until his Office 
intervened. He found therefore that the 
company had initially failed to comply with 
this principle. However, he also noted that 
the company had subsequently designated a 
senior official responsible for ensuring 
compliance with the Act. The Commissioner 


considered this issue resolved. 
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Regarding Principle 4.9, the Commissioner 
likewise determined that the company had 
provided the complainants with their personal 
information only after intervention by his 
Office. He found therefore that the company 
had not initially been in compliance with this 
principle. He noted, however, that the com- 
plainants were satisfied that they had received 
all of their personal information in the com- 
pany’s possession; they were also satisfied with 


the outcome of the investigation. 


The Commissioner concluded that the 


complaint was well-founded and resolved. 


_ Employee objects to employer's use 
of bank account number on pay statement 
[Principles 4.3 and 4.7, Schedule 1] 
Complaint 
An employee of a telecommunications 


company complained that her employer: 


1. Used her personal information for a purpose 
without her consent by printing her bank 
account and bank transit numbers on her 


pay statements; and 


2. Did not adequately safeguard employees’ 
pay statements given the sensitivity of the 


information in them. 


Summary of Investigation 

The employees of the telecommunications 
company in question receive their pay by 
direct deposit and their pay statements by 


delivery in sealed envelopes at the workplace. 


As a result of a merger and a subsequent 
conversion of payroll systems, bank account 
and bank transit numbers began to be 
included on all employees’ pay statements as 
of January 1, 2001. Printing of such numbers 
on pay statements has become standard prac- 
tice in both the private and the public sectors. 
On this company’s statements, there is no 
indication what the numbers refer to; only a 
person familiar with the bank’s information 
codes would know what the numbers 
represent. On delivery to the complainant’ 
workplace, the sealed envelopes containing 
employees’ pay statements are collected 
together in a larger envelope and left on a 
manager's desk, where they often remain 
unsecured and largely unattended for periods 


as long as 24 hours. 


The complainant had originally consented to 
having her pay deposited directly into her 
bank account, but had never explicitly con- 
sented to having the numbers appear on her 
statement. She believed that her employer was 
thus using her personal bank account infor- 
mation without her consent and for a purpose 
inconsistent with that for which she originally 
had provided it. She also believed that her 
employer did not adequately safeguard 


employee pay statements at her workplace. 


The company’s position was that the informa- 
tion was still being used only for the original 
purpose of directly depositing payroll funds; 


that the practice of printing account and 
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branch numbers on pay statements had become 
imperative for purposes of verifying allocations 
of funds and resolving discrepancies; and that 
many employees had already come to expect 
and rely upon the appearance of these numbers 
on their statements. The company also argued 
that it did adequately safeguard its employees’ 
bank account information by delivering 


statements in confidential sealed envelopes. 


Commissioner's Findings 
(Issued November 5, 2001) 


JuRIsDICTION: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to federal works, 
undertakings, or businesses. The Commissioner 
had jurisdiction in this case because telecom- 
munications companies are federal works, 


undertakings, or businesses as defined in 
the Act. 


APPLICATION: Principle 4.3, Schedule 1, states 
that the knowledge and consent of the indi- 
vidual are required for the collection, use, or 
disclosure of personal information, except 
where inappropriate. This principle also stipu- 
lates (4.3.5) that the reasonable expectations of 
the individual are relevant. Principle 4.7 states 
that personal information shall be protected 
by appropriate security safeguards appropriate 


to the sensitivity of the information. 


On the first aspect of the complaint (consent), 
the Commissioner determined that employees 
who provide their bank account and bank 
transit numbers for direct-deposit purposes 


could reasonably expect those numbers to 
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appear on transaction records for the entirely 
consistent purpose of verifying proper allocation 
of funds. He was satisfied that the complainant 
had thus implicitly given consent. He found 
that the company therefore had met its 


obligations under Principle 4.3, Schedule 1. 


The Commissioner concluded that 


this aspect of the complaint was not 


well-founded. 


On the second aspect of the complaint 
(security safeguards), the Commissioner 
determined that the company’s operational 
controls at the complainant's workplace 

were not consistent with the sensitivity of the 
personal information contained in the pay 
statements. He found that the company did 


fail to meet its obligations under Principle 4.7, 


Schedule 1. 


However, he noted that the company, on 
being informed of its obligations, had taken 
immediate and appropriate steps to correct its 
information management practices related to 


employee pay statements. 


The Commissioner concluded that this 
aspect of the complaint was well-founded 


and resolved. 


FURTHER CONSIDERATIONS 

As a short-term solution, the company agreed 
to implement tighter operational controls at 
the complainant’s own workplace and offered 
the complainant the option of having her pay 


statement mailed to her home. 
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Company asks for customer's SIN as matter 
of policy [Principles 4.3.3 and 4.4.1, Schedule1; 
and section 5(3)] 
Complaint 
An individual complained that a telecommu- 
nications company had improperly collected 
her personal information in the form of her 


Social Insurance Number (stn). 


Summary of Investigation 

In signing-up the complainant for Internet 
connection, the telecommunications company 
in question had asked her for her sin. 
According to the complainant, the company 
representative with whom she had spoken had 
told her, “No sin, no connection,” and she 
had therefore felt obliged to give up her num- 
ber in order to obtain the service. It was the 
company’s written policy to collect sins from 
persons requesting services. The purpose of 
this policy was to avoid confusion over similar 
names among customers. However, by the 
same policy, the company did not insist on 
obtaining the stn in cases where the customer 
refused and did advise its employees that the 


collection was not obligatory. 


Commissioner's Findings 
(Issued November 5, 2001) 


JurispIcTIon: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to federal works, 
undertakings, or businesses. The Commissioner 
had jurisdiction in this case because telecom- 
munications companies are federal works, 


undertakings, or businesses, as defined in 
the Act. 


AppLicaTion: Principle 4.3.3, Schedule 1, 
states that an organization shall not, as a con- 
dition of the supply of a product or service, 
require an individual to consent to the collec- 
tion, use, or disclosure of information beyond 
that required to fulfil the explicitly specified 
and legitimate purposes. Principle 4.4.1 states 
that organizations shall not collect personal 
information indiscriminately. Both the 
amount and the type of information collected 
shall be limited to that which is necessary to 
fulfil the purposes identified. Section 5(3) 
states that an organization may collect, use, or 
disclose personal information only for pur- 
poses that a reasonable person would consider 


are appropriate in the circumstances. 


Regarding Principle 4.4.1, the Commissioner 
determined that, by the company’s own policy, 
the collection of sins was non-obligatory and 
therefore not necessary to fulfil explicitly 
specified and legitimate purposes. He found 
that the collection was thus indiscriminate 
and that the company was not in compliance 


with this principle. 


Regarding Principle 4.3.3, the Commissioner 
was satisfied that the complainant had clearly 
received the impression that giving her s1N 
was a condition of service. He found therefore 
that the company was not in compliance with 


this principle. 
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Regarding section 5(3), the Commissioner was 
mindful of his Office’s longstanding position 
that the sin should not be used as a universal 
identifier and that citizens should not give out 
their sins unless legally required to do so for 
purposes of the limited number of federal 
government programs authorized for such 
collection. He was satisfied that a reasonable 
person would object to the collection of sins 
for purposes of Internet connection. He 
found that the company was therefore not in 


compliance with section 5(3). 


The Commissioner noted that the company 
had removed the sin from the complainant's 
file and was in the process of changing its pol- 


icy so that sins would no longer be requested. 


The Commissioner concluded therefore 
that the complaint was well-founded 


and resolved. 


FURTHER CONSIDERATIONS 

The Commissioner also recommended that 
the company take steps to review its files and 
remove any other unnecessary sINs collected 


from its other customers. 


User accuses ISP owner of reading and 
blocking her e-mail [Principle 4.3, Schedule 1] 
Complaint 
An individual complained that the owner of 


her former Internet service provider (tsp): 


1. Had improperly collected her personal 
information without her consent in that he 


had read her e-mails; and 
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2. Was blocking e-mail she was attempting 
to send through a new Isp to users of her 


former ISP. 


Summary of Investigation 

The complainant had been a subscriber with 
a certain Isp for two years. During that time, 
she had had a disagreement with the tsp 
owner concerning her use of her account, 
specifically her attempts to transmit large files 
by e-mail. She alleged that during that 
disagreement the owner had told her that he 
could read her e-mails. She further alleged 
that, after she had moved to another city and 
subscribed with a different isp, the same 
owner had begun to block the e-mails she was 
trying to send to users of her former Isp. 

The owner in question said that he could not 
remember any disagreement with the com- 
plainant, but he did allow that, on detecting a 
large number of “delivery failure” messages 
(indicating attempts to transmit large files by 
e-mail), it would have been his usual practice 
to call the user and discuss the matter. He 
denied being able to read anything other 
than “delivery failure” messages in relation to 
the complainant’s account. He also denied 


blocking her messages. 


The investigation confirmed that the sp in 
question can monitor users’ account activity 
and detect “delivery failure” messages, but 
does not receive e-mails or attachments and 
cannot read the content of users’ e-mail mes- 
sages. Nor was there any evidence that the 


owner had been blocking the complainant's 
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e-mails from her new server. In fact, several 
weeks before the owner was notified of the 
complaint against him, the blocking problem 
ceased when a computer technician changed 
the Internet protocol address on the com- 


plainant’s computer. 


Commissioner’s Findings 
(Issued November 5, 2001) 


Jurispiction: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to federal works, 
undertakings, or businesses. The Commissioner 
had jurisdiction in this case because Internet 
service providers are federal works, undertak- 


ings, or businesses as defined in the Act. 


App.ication: Principle 4.3, Schedule 1, 
states that the knowledge and consent of 

the individual are required for the collection, 
use, or disclosure of personal information, 


except where inappropriate. 


The Commissioner was satisfied that the isp 
could not read its users’ e-mails and had not 
blocked the complainant’s messages. He also 
determined that a reasonable person would 
expect the Isp to monitor the services it 
provides and respond to persistent “delivery 
failure” messages. He found that the isp 

in this case was not in contravention of 


Principle 4.3, Schedule 1. 


The Commissioner concluded therefore that 


the complaint was not well-founded. 


Employer sends third parties copies of 
response to employee's access requests 
[Principles 4.3 and 4.5, Schedule1; 
and section 5(3)] 
Complaint 
An employee of an airport authority com- 
plained that her employer had, without her 
consent, disclosed to three third parties her 
personal information in the form of copies 


of a letter of response to access requests she 


had made. 


Summary of Investigation 

The complainant had submitted requests 
under the Personal Information Protection and 
Electronic Documents Act for access to infor- 
mation held by her employer. The employer 
subsequently sent her a letter of response to 
the effect that the organization was refusing 
her requests. This letter also indicated that 
copies were being sent to three other persons 
— specifically, two union representatives and 
the coordinator of employee relations at the 
airport. The complainant had not sent copies 
of her access requests to these parties and had 
not explicitly consented to having copies of 


the response letter sent to them. 


The union representatives had previously 

attended the meeting at which the issue of 
vee 

access to the complainant's personal informa- 

tion had first been raised. The employee 

relations coordinator had previously intervened 

in a harassment complaint filed by the same 


complainant and had in his possession certain 
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related documents to which the complainant 
had requested access. On the grounds of these 
prior involvements, the employer argued that 
the complainant had implicitly consented to 
the disclosures. The complainant maintained 
that she had submitted the access requests 
personally on her own behalf, without union 


intervention. 


Commissioner's Findings 
(Issued November 5, 2001) 


JURISDICTION: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to federal works, 
undertakings, or businesses. The Commissioner 
had jurisdiction in this case because airports 


are federal works, undertakings, or businesses, 


as defined in the Act. 


APPLICATION: Principle 4.3, Schedule 1, states 
that the knowledge and consent of the indi- 
vidual are required for the collection, use, or 
disclosure of personal information, except 
where inappropriate. Principle 4.5 states that 
personal information shall not be used or dis- 
closed for purposes other than those for which 
it was collected, except with the consent of the 
individual or as required by law. Section 5(3) 
states that an organization may collect, use, or 
disclose personal information only for pur- 
poses that a reasonable person would consider 


appropriate in the circumstances. 


Regarding Principle 4.3 and the disclosure to 
the union representatives, the Commissioner 


determined that there would have been 
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implied consent for the employer to send 
response copies to those parties only if the 
complainant had indicated that she had sent 
them copies of her access requests. The 
complainant had the right to exercise her 
formal recourse without union intervention, 
and it was not necessary for the employer 

to inform the union of its response. The 
Commissioner found that no implied consent 
had existed as far as the union representatives 
were concerned. Furthermore, in consideration 
of section 5(3), he was satisfied that a reasonable 
person would have considered the disclosure 


to the union representatives to be unacceptable. 


He concluded therefore that this aspect of 


the complaint was well-founded. 


Regarding Principle 4.5 and the employee 
relations coordinator, given the direct involve- 
ment of that party in the access request, the 
Commissioner determined that it had been 
appropriate for the employer to inform him 
of its decision to refuse the complainant 
access to the documents she had requested. 
Furthermore, in consideration of section 5(3), 
the Commissioner was satisfied that a 
reasonable person would have considered the 
communication to the employee relations 
coordinator to be acceptable. He found that 
the employer was thus in compliance with 
Principle 4.5 as far as the employee relations 


coordinator was concerned. 


He concluded therefore that this aspect of 


the complaint was not well-founded. 
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FURTHER CONSIDERATIONS 

During the investigation, the Office of the 
Privacy Commissioner advised the airport 
authority in question that it is preferable not 
to send copies of responses to third parties, 
but rather to allow the individual requester to 
judge whether or not to share a response with 
others after receiving it. The Commissioner 
was pleased to note that the organization had 
followed this advice in dealing with subse- 


quent access requests by the complainant. 


Telephone company demands identification 

from new subscribers [Principles 4.2, 4.2.3 and 

4.3, 4.3.2, 4.3.3 Schedule; and section 5(3)] 
Complaint 
An individual complained that a telecommu- 
nications company’s collection of personal 
information from new subscribers was 
inappropriate, in that the company required 
a deposit from new customers who refused 


to supply the information. 
pply 


Summary of Investigation 

When the complainant attempted to obtain a 
new telephone service from the company in 
question, an operator asked her to supply 

two pieces of personal identification. When 
the complainant expressed reluctance, the 
operator told her that she would have to 
provide a deposit if she did not comply. The 
operator also told her that the purpose of 

the information collection was to confirm her 


identity. A company supervisor subsequently 


gave her the same explanation for the collection 
and confirmed that she would have to provide 


a deposit if she did not supply the information. 


It is company policy for operators to ask new 
subscribers for two pieces of identification, to 
demand a deposit in cases of refusal, and to 
explain the information collection simply as 
confirmation of identity. However, in cases 
where an applicant is a new customer with no 
previous business relationship with the com- 
pany, the actual purpose of the collection is to 
run a credit check on the applicant, in accor- 
dance with crrc regulations, given that the 
provision of telephone services constitutes an 


extension of credit on the company’s part. 


Commissioner’s Findings 
(Issued November 8, 2001) 


Jurrspiction: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to federal works, 
undertakings, or businesses. The Commissioner 
had jurisdiction in this case because telecom- 
munications companies are federal works, 


undertakings, or businesses, as defined in 


the Act. 


Appuication: Principle 4.2.3 states that 
purposes should be identified at or before the 
time of collection. Principle 4.3.2 states that 
organizations must make a reasonable effort 
to advise the individual concerned of the 
purposes for which the information will be 
used and must do so in such manner that 


the individual can reasonably understand. 
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Principle 4.3.3 states that organizations must 
not, as a condition of supplying a product or 
service, require an individual to consent to the 
collection, use, or disclosure of information 
beyond that required to fulfil the explicitly 
specified and legitimate purposes. Section 5(3) 
states that an organization may collect, use, or 
disclose personal information only for pur- 
poses that a reasonable person would consider 


appropriate in the circumstances. 


Regarding Principle 4.3.3 and section 5(3), the 
Commissioner determined that a reasonable 
person would consider it appropriate for the 
company to collect personal information for 
the purpose of confirming whether a potential 
customer is credit worthy or, in the case of 


repeat Customers, confirming identity. 


He concluded that this aspect of the 


complaint was not well-founded. 


Regarding Principles 4.2.3 and 4.3.2, the 
Commissioner determined that a reasonable 
person would conclude that the company 
did not explicitly state the purpose for its 
collection of personal information with 


respect to first-time subscribers. 


He concluded that this aspect of the 


complaint was well-founded. 


FURTHER CONSIDERATIONS 

The company agreed to amend its practice in 
identifying purposes. Specifically, the company 
will inform first-time subscribers that the 


purpose of its information collection is to 
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assess credit-worthiness given that the 
company supplies credit in the form of 


long-distance calling service. 


Broadcaster accused of collecting personal 
_ Information via Web site [Section 2; 

and Principle 4.3, Schedule 1] 
Complaint 
An individual complained that a broadcaster 
had attempted, through its advertising server, 
to collect his personal information, specifically 
the NETBIOs information on his computer, 


without his consent. 


Summary of Investigation 

The complainant had a computer equipped 
with both a cable modem for Internet con- 
nection and a firewall designed to detect and 
block attempts at intrusion. Every time he 
tried to log onto the organization’s Web site, 
his firewall detected, rejected, and reported 
on, an attempt by the broadcaster's advertising 
server to gain access to the NETBIOs information 
on his computer. A NETBIOS is a computer’s 
common or “friendly” name related to its 
Internet protocol (1p) address. If an 1p address 
is traced, it allows access to information such 
as Web sites visited by the computer’s user 

or recent passwords used in obtaining access 
to secure accounts. The likelihood of tracing 
an 1p address is small if the user has dial-up 
Internet access, but significantly greater if the 
user has a fixed Internet connection via a cable 


modem, as was the case with the complainant. 
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After conducting internal inquiries, the 
organization confirmed that the complainant's 
allegation was true. The broadcaster explained 
that the network administrator, on installing 
Microsoft Windows nT, had neglected to 
deactivate certain features that come automat- 
ically with that program. These features, 
known as Internet Name Services, enable a 
server to collect the NETBIOS information 

of Web site users. Once informed that the 
features were on, the network administrator 
promptly turned them off. The complainant 
subsequently confirmed that his firewall no 
longer detected any attempts by the organiza- 


tion to obtain his NETBIOS information. 


Commissioner’s Findings 
(Issued November 20, 2001) 


Jurispiction: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to federal works, 
undertakings or businesses. The Commissioner 
had jurisdiction in this case because broad- 
casters are federal works, undertakings or 


businesses, as defined in the Act. 


APPLICATION: section 2 of the Act defines 
personal information to be “... information 
about an identifiable individual ...”. 
Principle 4.3 of Schedule 1 states that the 
knowledge and consent of the individual 
are required for the collection, use, or 
disclosure of personal information, except 


where inappropriate. 


The Commissioner was satisfied that in some 
circumstances, notably the complainant's, a 
NETBIOS might be used to obtain information 
traceable to an identifiable individual. He 
determined therefore that the information 


at issue was personal information for purposes 


of the Act. 


The Commissioner found that the broad- 
caster had failed to meet its obligations under 
Principle 4.3. However, he did not dispute 
the broadcaster’s explanation that this failure 
had been unintentional, and he noted that 


its response had been satisfactory. 


He concluded therefore that the complaint 


was well-founded and resolved. 


Couple alleges bank withheld loan information 
[Sections 8(3) and 8(5)] 
Two Complaints 
A husband and wife complained in two sepa- 
rate complaints that a bank had denied them 
access to their personal information in that it 
had not responded to their request for infor- 


mation related to a loan application. 


Summary of Investigation 

The complainants had written, jointly signed, 
and submitted two letters requesting personal 
information about two different credit products 
from their local branch of the bank in 
question. The letters were identical, except for 
their subject lines, one of which referred to a 


numbered loan application and the other to a 
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numbered mortgage, both relating to the 
complainants. Within the month, the bank 
sent them the information they had requested 
about their mortgage, but no information 
about their loan application. The complainants 
wrote the bank another letter, outlining in 
greater detail the information they were seek- 
ing about the loan application. Approximately 
one month after this second submission, a 
lawyer for the bank responded, informing the 
complainants only that they would be 
required to pay photocopying charges of 

25 cents per page. The complainants then 
submitted another letter in which they 
enclosed a cheque to cover reproduction costs 
and confirmed that they still wanted the 
information in question. When they received 
no further response after three weeks, they 
filed their complaints with the Office of the 


Privacy Commissioner. 


The bank at first denied the allegation, insist- 
ing that the complainants’ second submission 
had been the first to make reference to the 
loan application. However, on being presented 
with a copy of the letter containing the prior 
reference, the bank checked its records and 
acknowledged receipt of that earlier letter. 
The bank explained that its failure to respond 
had been unintentional, in that the employee 
who had received the first submission had not 
noticed the different subject headings on the 


two similar-looking letters, had assumed they 
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were identical, and had therefore forwarded 
only one of them (the one referring to the 


mortgage) on for response. 


Commissioner's Findings 
(Issued November 26, 2001) 


JURISDICTION: As of January 1, 2001, the 
Personal Information Protection and Electronic 
Documents Act applies to federal works, 
undertakings, or businesses. The Commissioner 
had jurisdiction in this case because banks 


are federal works, undertakings, or businesses, 


as defined in the Act. 


APPLICATION: Section 8(3) of the Act states 
that an organization shall respond to a request 
with due diligence and in any case not later 
than thirty days after receipt of the request. 
Section 8(5) states that if the organization fails 
to respond within the time limit, the organi- 


zation is deemed to have refused the request. 


The Commissioner found that the bank had 
failed to respond within the time limit and 
was thus in contravention of section 8. 
However, he was satisfied that this failure had 
been unintentional, and he noted that the 
bank had subsequently provided to the com- 


plainants all the information they had sought. 


He concluded therefore that the complaints 


were well-founded and resolved. 
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Incidents under PIPED Act 


Incidents are matters that come to my atten- 
tion through various sources including issues 
raised in the media. These are usually issues 
where there is no identified victim and where 
no complaint has been filed. During the 

past 11 months my Office has looked into the 


following two incidents. 


Transportation company collects, 

discloses passengers’ personal information 
Incident 
It was alleged that a transportation company’s 


sales agents were: 


1. asking for date of birth and citizenship as 
well as name from individuals making 
train bookings by phone or in person for 


the Toronto-to-New York run; and 


2. disclosing this information to United 
States Customs (usc) and the United States 
Naturalization and Immigration Service 


(USNIS). 


Summary of Investigation 

The Canadian company confirmed that the 
practice in question has been taking place 
since December 2000, by agreement among 
the company, the U.S. transportation com- 
pany, Canada Customs and Revenue Agency, 
and usc/usNis. The purpose is to minimize 


delays at the Canada/U.S. border. The 


personal information thus collected is stored 
in the company’s reservation computer 

system and deleted if the individual does not 
eventually purchase the ticket. If the passenger 
does purchase the ticket, his or her name, 

date of birth, and citizenship are printed on a 
manifest, which is then faxed to UsC/USNIS 
and a copy given to the service manager on 
board the train. The service manager destroys 


the manifest shortly after the trip is completed. 


The Office of the Privacy Commissioner of 
Canada determined that the sales agents, on 
written instruction from the company, had 
been representing the practice as a require- 
ment for passengers on the Toronto-to-New 


York run. 


Outcome 

The company asked the Office of the Privacy 
Commissioner of Canada for instructions on 
an acceptable resolution to the problem. The 
Office advised that it issue to its sales agents 
a clear directive to the effect that passengers’ 
provision of date of birth and citizenship 
must be represented as voluntary and that 
agents may, after booking a ticket, ask 
customers whether they would be willing to 
provide this information in order to facilitate 


customs clearance at the border. 
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On receiving a copy of such a directive sent by 
the company to its sales agents, the Office 
informed the company that the incident file 
would be closed, subject to the Office’s con- 
tinued monitoring of sales agents’ booking 
practices. The Office also advised that at 

some point the company send its sales agents 
a follow-up note clarifying in stronger terms 
that they are not to collect personal information 
at the time of booking without the informed 


consent of the individual. 


Web site broadcasts 

cell phone conversations 
Incident 
The Ottawa Sun reported on June 7, 2001, 
that an Ottawa-based Web site was streaming 
live audio from cellular telephones onto the 


Internet from a radio. 


A scanner was intercepting cellular telephone 
traffic. The scanner was connected to a 
computer that was hosting a Web site. By 
connecting to the Web site, anyone could 


listen in on private cell phone conversations. 
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Outcome 

As the Office of the Privacy Commissioner 
began its investigation, the Internet service 
provider (Isp) in question shut down the Web 
site because of bandwidth problems. This was 
caused by an employee who had a personal 
network account that had been forwarding 
data through another server. On discovery, the 
isp had immediately relieved the employee of 
his duties. The tsp indicated that the Web site 
in question had moved to a New York server 


under new management. 


Given that the Ottawa-based Web site had 
been shut down, the Office’s investigation was 
discontinued. The Web site will be monitored 


periodically for an indefinite length of time. 
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Inquiries by type under PIPED Act 
January 1, 2001 to November 30, 2001 


Subject Number 
Criminal records 30 
Drug Testing 3) 
Encryption i 
Financial Institutions gat) 
Identity Theft 38 
Information Request 23599 
Interception/monitoring 154 
Interpretation 2,024 
Jurisdiction LOT 
Marketing 439 
Medical Records 137, 
Calls from Members of Parliament i, 
Publication Requests 675 
Social Insurance Number 1,834 
Telecommunications 786 
‘Transportation 139 
Other 388 
Total V2,713 
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Privacy PRACTICES AND REVIEWS 


The Personal Information Protection and 
Electronic Documents Act allows me to audit 
the compliance of private organizations if I 
have “reasonable grounds to believe” that the 
organizations are contravening a provision of 


the Act. 


Following accepted standard audit objectives 
and criteria, the Privacy Practices and Reviews 
Branch of my Office will conduct compliance 
reviews and audits under section 18 of the Act. 
As it has come into effect at the beginning of 
this year, I have not yet initiated any such 
audit. I have focused instead on educating 
businesses and organizations on the impact of 
the new legislation, and giving them guidance 
for establishing privacy policies that comply 


with it. 
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Mathew Englander v. Telus Communications Inc. 


This is the first application for judicial review 
to be filed in the Federal Court under the 
PIPED Act. Mathew Englander filed a 
complaint with the Office of the Privacy 
Commissioner on January 1, 2001 claiming, 
inter alia, that Telus uses and discloses 
customers’ names, addresses and telephone 
numbers in its White Pages directories and 
otherwise, without customers’ knowledge 
and consent and that Telus inappropriately 
charges customers for choosing to have their 
telephone number “non-published”. The 
applicant submitted that these actions by 
‘Telus contravene subsections 5(r) and (3) of 
the PIPED Actas well as several clauses of 
Schedule 1 of the PIPED Act. 


After investigating the complaint, I concluded 
that Telus is in full compliance with the Act in 
respect of the matters of which the complaint 
was made. I concluded that a reasonable 
person would consider Telus’ initiation of 
service practice and subsequent publishing of 
customers’ personal information in its white 
Pages is an appropriate collection, use and 
disclosure of the information. I further con- 
cluded that Telus has the authority to charge 


its customers a fee for non-published telephone 


Part Two <~ REportT ON THE PERSONAL INFORMATION PROTECTION AND ELECTRONIC DOCUMENTS ACT 


service and that this is not an unreasonable 
practice so as to contravene principle 4.3.3 of 


Schedule 1. 


I found the complaint not well-founded. As 
permitted by section 14 of the PIPED Act, 
Mr. Englander has applied to the court fora 


hearing in respect of the matter. 


Ronald G. Maheu v. The Attorney General of 
Canada and IMS Health Canada 


The applicant has applied for a hearing in the 
Federal Court, as permitted under section 14 
of the PIPED Act, after having complained 
to me that ms Health improperly discloses 
personal information by gathering and selling 
data on physicians’ prescribing patterns 


without their consent. 


After having investigated the matter, I found 
that prescription information, whether in 

the form of an individual prescription or in 
the form of patterns discerned from many 
prescriptions, is not personal information 
about a physician. In determining whether the 
information at issue was personal information 
within the meaning, scope and purpose of 
the Act, I took the view that the meaning of 
“personal information’, though broad, is not 


so broad as to encompass all information 


associated with an individual. I found that an 
individual prescription, though potentially 
revealing about a patient, is not in any mean- 
ingful sense about the prescribing physician as 
an individual but is about the professional 
process that led to its issuance and should 

be regarded as a work product — that is, the 
tangible result of the physician’s work activity. 
In sum, I concluded that the complaint was 


not well-founded. 


Mr. Maheu has applied to the court for a 
hearing in respect of this matter. Included in 
the Notice of Application was a request by the 
applicant, under the Federal Court rules, that 
my Office transmit material in its possession 
to the applicant and the Registry of the 
Federal Court. The Office of the Privacy 
Commissioner has objected to the request, as 
all documents not already in the possession 
of the applicant cannot be disclosed by the 
Privacy Commissioner pursuant to provisions 


of the PIPED Act. 
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COMMUNICATIONS AND 
PUBLIC EDUCATION 


Under the PIPED Act, my Office was given a 
broader mandate for public education in order 
to increase awareness and understanding of 
privacy issues. To focus on this important new 
responsibility, establishing the Communications 
and Strategic Analysis Branch was one of the 
first steps I took following my appointment. 
This branch has undertaken a number of 
activities during the past year to help raise 
awareness of privacy issues and to inform 
Canadian citizens and businesses about the 


new private sector legislation. 


Public speaking is an invaluable tool that 
helps me fulfill my responsibility for promotion, 
public education and awareness of privacy 
issues. I have given 35 speeches to a range of 
organizations across Canada and internation- 
ally over the past year. Another 31 speeches 
were delivered by other senior staff. Speeches 
have focused on the major issues of the day, 
such as the security versus privacy debate that 
ensued following the Sept. 11 attacks on the 
U.S. Many other speaking engagements have 
been used to tell citizens and businesses alike 
about the new Act and how it affects them, to 
discuss privacy in the workplace, and to raise 
privacy concerns about specific initiatives, 
including Government On-Line, electronic 
health records and the growing use of video 


surveillance. 
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As well, recognizing the influence of the 
media in setting the agenda for public debate 
and in raising public awareness, my Office has 
begun to proactively track privacy issues in the 
media and has become much more engaged in 


a variety of media relations activities. 


These activities have included disseminating 
public statements, news releases and feature 
articles to both mainstream and targeted 
media; granting media interviews and 
participating in editorial board meetings; 
and providing media relations support for 
speeches, conferences and other special 
events. In addition, my Office has responded 
to inquiries from the media, providing 
comment and background information on a 


wide variety of privacy-related issues. 


Every month, the number of media queries 
continues to increase, currently averaging 
anywhere from 80 to 100 per month. In 
addition, I have granted more than 210 media 


interviews since September 2000. 


Public education materials 


My Office has produced and distributed 
promotional and educational material to 
satisfy an increased demand for information 
under the PIPED Act. We have published 
comprehensive guides to the new Act for 
both businesses and individuals. More than 
21,000 of both of these guides have been 


distributed during 2001. 
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In addition, we have created posters, privacy 
kits, notepads and bookmarks. All these 

products help to satisfy the demand for more 
information on privacy issues by individuals, 


businesses and other organizations. 


Advertising 


As part of the public outreach program to 
raise awareness of the new privacy rights of 
Canadians in the private sector, beginning 
with federally regulated businesses, my 
Office placed advertisements in more than 
1,300 daily and community newspapers in all 
parts of Canada, These ads were directed at 
informing Canadians of their rights under the 
PIPED Act. The advertisement, under the 
banner “Your privacy is our concern” and 

« Votre vie priveé, ¢a nous regarde », which 
ran in March 2001, reached millions of 


Canadians in all regions of the country. 


A second advertisement ran in the 12 newspa- 
pers in the three territories, pointing out 

that the Personal Information Protection 

and Electronic Documents Act applies to all 
businesses in the territories as they are consid- 
ered to be federal works and undertakings. 
Following the appearance of the advertisements, 
my Office noted a significant increase in the 


number of inquiries and requests for further 


information about the PJPED Act. 


Web Site 
Over the past year, my Office’s Web site has 


undergone a complete redesign and consider- 
able expansion as part of our greater mandate 
for public education and awareness under the 


new Act. 


Every effort is made to ensure the Web site is 
an up-to-date resource for privacy information, 
as well as a useful tool for research on privacy- 
related issues. Ultimately, the redesigned 
Web site is more interactive, user-friendly and 


relevant to both individuals and businesses. 


I am pleased to report that the Web site is 

an increasingly efficient tool for reaching 
Canadians and others with information about 
privacy issues. Visits to our site continue 

to increase, with an average of 11,500 visits 


per month. 
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Communications Activities 
January 1, 2001 to November 30, 2001 


Activity Number 
Speeches delivered by Privacy Commissioner Be) 
Speeches delivered by senior staff 31 
News Releases 15 
Media Interviews 210 
Distribution of materials 27,586 

Business Guides 13,005 

Citizen’s Guides 8,707 

Other (Annual Reports, bookmarks, fact sheets, Acts, etc.) 5,874 
Average number of visits to Web site per month 11,500 
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GEARING UP FOR IMPLEMENTATION 
OF THE PRIVATE SECTOR ACT 


HE OFFICE HAS INCREASED 

the size of its staff and 

budget to prepare for 
implementation of the Personal 
Information Protection and Electronic 
Documents Act, which started 
coming into effect January I, 2001. 


Our budget was increased to more 
than $11 million per year beginning 
April 1, 2001, up from $8.7 million 
for 2000-2001. This budget increase 
enabled my Office to make a 
number of important changes, 


which included: 


™ increasing inquiries staff to handle an 


increase in the number of calls; 


Part [THREE 
CORPORATE 
SERVICES 


m extending our hours from 9 a.m. to 5 p.m. 


in all time zones across Canada; 


establishing the Privacy Practices and 
Reviews Branch to handle audits under the 
Personal Information Protection and 
Electronic Documents Act and to continue 


work in the public sector; 


establishing a Communications and 
Strategic Analysis Branch, incorporating 
the existing research function, to focus on 
communications and public education, 
and to ensure that we are a centre of 


expertise on issues related to privacy; and 


increasing the number of investigators to 


handle complaints under both Acts. 


A long-term financial framework for future 
funding will be presented to the Treasury 


Board of Canada Secretariat in 2003-2004. 


109 


ANNUAL REPORT TO PARLIAMENT 2000-2001 


Resources 
(April 1, 2000 to March 31, 2001) 


FTEs Expenditure Totals Percentage of Total 
Privacy 56 $ 7,418,451 89% 
Corporate Services 10 $ 941,369 11% 
Total 66 $ 8,359,820 100% 


Note: FTE stands for “full-time equivalent” or full-time staff. 


Detailed Expenditures’ 
April 1, 2000 to March 31, 2001 


Part THREE <> CORPORATE SERVICES 


Privacy Corporate Services” Total 
Salaries $3,776,280 $464,091 $4,240,371 
Employee Benefit 
Plan Contributions 611,000 84,500 695,500 
Transportation and 
Communication 268,588 93,470 362,058 
Information 979,136 1993 9815129 
Professional Services 600,427 (DAISY 721,624 
Rentals 33,036 13,953 46,994 
Repairs and Maintenance 52757, Vi 32,721 360,432 
Materials and Supplies 62,616 28,400 91,016 
Acquisition of Machinery 
and Equipment 759,403 100,998 860,401 
Other Subsidies and Payments 254 4] ED 
Total $7,418,451 $941,369 $8,359,820 


Notes: 


| Expenditure figures do not incorporate final year-end adjustments. 


* Expenditures for Corporate Services are allocated on a 50/50 basis and shared between 


the Offices of the Privacy Commissioner of Canada and the Information Commissioner 


of Canada. 
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CORPORATE STRUCTURE 


Office of the Privacy Commissioner of Canada 


Privacy Commissioner of Canada 


Director General 
Communications and 
Strategic Analysis 


Executive 
Director 


General 


Counsel 


Director General Director General 


Investigations Privacy Practices 
and Inquiries and Reviews 
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The Honourable Daniel Hays 
The Speaker 
The Senate of Canada 


Dear Mr. Hays: 


I have the honour to submit to Parliament my Annual Report which covers the period from 
April 1, 2001 to March 31, 2002 for the Privacy Act and from December 1 to 31, 2001 for the 


Personal Information Protection and Electronic Documents Act. 


I had originally intended this report to be released last spring. The year 2002 was a tumultuous 
one for privacy, however, and I was reluctant to report to Parliament while major issues, 
particularly issues involving the crucial balance between privacy and security in the aftermath 
of September 11, remained unresolved. In keeping with my mandate as an ombudsman for the 
privacy rights of Canadians, I continued to seek resolutions of these issues with ministers and 
senior public servants. Io date, despite repeatedly extending my deadlines, I have not been 
successful. Obviously, I cannot ask Parliament to wait indefinitely, and must submit my report 


despite this inconclusive and unsatisfactory state of affairs. 


I will report on the experience with the second year of the Personal Information Protection and 


Electronic Documents Act in my next annual report. 


Yours sincerely, 


George Radwanski 


Privacy Commissioner of Canada 
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The Honourable Peter Milliken 
The Speaker 


The House of Commons 


Dear Mr. Milliken: 


[ have the honour to submit to Parliament my Annual Report which covers the period from 
April 1, 2001 to March 31, 2002 for the Privacy Act and from December 1 to 31, 2001 for the 


Personal Information Protection and Electronic Documents Act. 


[had originally intended this report to be released last spring. The year 2002 was a tumultuous 
one for privacy, however, and I was reluctant to report to Parliament while major issues, 
particularly issues involving the crucial balance between privacy and security in the aftermath 
of September 11, remained unresolved. In keeping with my mandate as an ombudsman for the 
privacy rights of Canadians, I continued to seek resolutions of these issues with ministers and 
senior public servants. To date, despite repeatedly extending my deadlines, I have not been 
successful. Obviously, I cannot ask Parliament to wait indefinitely, and must submit my report 


despite this inconclusive and unsatisfactory state of affairs. 


I will report on the experience with the second year of the Personal Information Protection and 


Electronic Documents Act in my next annual report. 


Yours sincerely, 


George Radwanski 


Privacy Commissioner of Canada 
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T IS MY DUTY, IN THIS ANNUAL 

Report, to present a solemn 

and urgent warning to every 
Member of Parliament and Senator, 


and indeed to every Canadian: 


The fundamental human right 

of privacy in Canada is under 
assault as never before. Unless the 
Government of Canada is quickly 
dissuaded from its present course 
by Parliamentary action and public 
insistence, we are on a path that 
may well lead to the permanent 
loss not only of privacy rights that 
we take for granted but also of 
important elements of freedom as 


we now know it. 


We face this risk because of the implications, 

both individual and cumulative, of a series of 
initiatives that the Government has mounted 
or is actively moving toward. These initiatives 
are set against the backdrop of September 11, 


and anti-terrorism is their purported rationale. 


COMMISSIONER S 
OVERVIEW 


But the aspects that present the greatest threat 
to privacy either have nothing at all to do 
with anti-terrorism, or they present no credi- 


ble promise of effectively enhancing security. 


The Government is, quite simply, using 


September 11] as an excuse for new collections 


and uses of personal information about all 


of us Canadians that cannot be justified by George Radwanski 


, : : Privacy Commissioner of Canada 
the requirements of anti-terrorism and 
that, indeed, have no place in a free and 


democratic society. 


As of the date this Report went to press, 
January 17, the Government has shown 

no willingness to modify these initiatives in 
response to privacy concerns. Whether the 
Government’s awareness of the immiunence 
of this Report will have brought about any 
change by the time the Report is tabled, 


I cannot foresee. 


I wish to emphasize at the outset that I have 
never once raised privacy objections against a 
single actual anti-terrorist security measure. 
Indeed, I have stated repeatedly ever since 
September 11 that I would never seek as 


Privacy Commissioner to stand in the way 
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of any measures that might be legitimately 
necessary to enhance security against terrorism, 
even if they involved some new intrusion or 


limitation on privacy. 


I have objected only to the extension of 
purported anti-terrorism measures to addi- 
tional purposes completely unrelated to 
anti-terrorism, or to intrusions on privacy 
whose relevance or necessity with regard to 
anti-terrorism has not been in any way 
demonstrated. And still the Government is 


turning a resolutely deaf ear. 


Specifically, Iam referring to: the Canada 
Customs and Revenue Agency’s new “Big 
Brother” passenger database; the provisions 

of section 4.82 of Bill C-17; dramatically 
enhanced state powers to monitor our 
communications, as set out in the “Lawful 
Access” consultation paper; a national ID 

card with biometric identifiers, as advanced 
by Citizenship and Immigration Minister 
Denis Coderre; and the Government’ support 


of precedent-setting video surveillance of 


public streets by the RCMP. 


These initiatives are all cause for deep concern 
because of the intrusions on privacy that 

they directly entail. But they are even more 
disturbing because of the thresholds they 
cross and the doors they open. Each of these 
measures establishes a devastatingly dangerous 


new principle of acceptable privacy invasion. 


The CCRA’s database introduces the creation 
of personal information dossiers on all 
law-abiding citizens for a wide variety of inves- 
tigative purposes. Section 4.82 of Bill C-17 
requires, for the first time, de facto mandatory 
self-identification to the police for general 

law enforcement. The “Lawful Access” paper 
advocates the widespread monitoring of our 


communications activities and reading habits. 


A national [D card would remove our right 
to anonymity in our day-to-day lives. The 
RCMP’ video surveillance constitutes sys- 
tematic observation of citizens by the police 
as we go about our law-abiding business on 


public streets. 


These are not abstract or theoretical concerns. 
If these measures are allowed to go forward 

and the privacy-invasive principles they repre- 
sent are accepted, there is a very real prospect 


that before long our lives here in Canada will 


look like this: 


# All our travels outside Canada will be sys- 
tematically recorded, tracked and analyzed 
for signs of anything that the Government 
might find suspicious or undesirable. “Big 
Brother” dossiers of personal information 
about every law-abiding Canadian — 
initially travel information, but eventually 
supplemented by who knows what else — 
will be kept by the federal Government 
and will be available to virtually every 
federal department and agency, just in case 


they are ever handy to use against us. 


COMMISSIONER’S OVERVIEW 


IF THE GOVERNMENT’ S CURRENT INITIATIVES ARE ALLOWED TO GO FORWARD, 
THERE IS A VERY REAL RISK THAT PRIVACY AS WE KNOW IT WILL SOON BECOME 
A© DISTANT, ITRRETRIEVABLE MEMORY. 


m Any time we travel within Canada, we will 
have to identify ourselves to police so that 
their computers can check whether we are 
wanted for anything or are otherwise of 


interest to the state. 


m Police and security will be able to access 
records of every e-mail we send and every 
cellular phone call we make. Information 
on what we read on the Internet, every 
Web site and page we visit, will likewise be 


readily available to government authorities. 


a We will all be fingerprinted or retina-scanned 
by the Government. This biometric infor- 
mation will be on compulsory national ID 
cards that will open the way to being 
stopped in the streets by police and required 


to identify ourselves on demand. 


= Our movements through the public streets 
will be relentlessly observed through prolif- 
erating police video surveillance cameras. 
Eventually, these cameras will likely be 
linked to biometric face-recognition 
technologies that will match our on-screen 
images to file photos — from such sources 
as drivers’ licences, passports or ID cards — 
and enable the police to identify us by 
name and address as we go about our 


law-abiding business in the streets. 


I am well aware that these scenarios are 
likely to sound, to most people, like alarmist 
exaggeration. Certainly, the society [ am 


describing bears no relation to the Canada we 


know. But anyone who is inclined to dismiss 
the risks out of hand should pause first to 
consider that the privacy-invasive measures 
already being implemented or developed right 
now would have been considered unthinkable 


in our country just a short year ago. 


Iam not predicting that all this will necessarily 
happen. But I am warning with all the inten- 
sity at my disposal that, in each instance, once 
the principle has been accepted and the prece- 
dent has been established, further intrusions 
on privacy are only a matter of degree. That 


makes them virtually inevitable. 


The place to stop unjustified intrusions on a 
fundamental human right such as privacy is 
right at the outset, at the very first attempt to 
enter where the state has no business treading. 
Otherwise, the terrain will have been con- 


ceded, and the battle lost. 


Consequently, if the Government's current 
initiatives are allowed to go forward, there is a 
very real risk that privacy as we know it will 


soon become a distant, irretrievable memory. 


The situation is made all the more worrisome 
by the fact that the Government is doing all 
this in blatant, open and repeated disregard of 
the concerns that it is my duty to express as 
the Officer of Parliament mandated to oversee 


and defend the privacy rights of all Canadians. 


This disregard threatens the privacy rights 
of Canadians not only directly through 


the intrusive measures in question, but also 
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indirectly by undermining the whole edifice 
of privacy protection that has been in place 


in this country for nearly two decades. 


Regrettably, this Government has lost its 
moral compass with regard to the fundamental 


human right of privacy. 


It appears to have become convinced that pri- 
vacy must be sacrificed bit by bit, day by day, 
in pursuit of greater goods: reassuring a public 
frightened by the outrages of September 11; 
mollifying an insistent U.S. government; 
meeting the wishes of police, security forces 
and other Government institutions that have 
recognized the aftermath of September 11 as 


an opportunity to expand their powers. 


As well, the Government has become inappro- 
priately willing to brush aside all criticism of 
its assault on privacy rights, apparently regard- 
ing such criticism as simply a cost of doing 
business. This criticism has come not only 
from me in the exercise of my mandate from 
Parliament to oversee and defend the privacy 
rights of Canadians, but also from a great 
many others who have publicly endorsed 

my concerns. These include seven provincial 
and territorial Information and Privacy 
Commissioners from across Canada, the 
Canadian Civil Liberties Association, the 
B.C. Civil Liberties Association, the 

B.C. Freedom of Information and Privacy 
Association, the Ligue des droits et libertés, 


Electronic Frontier Canada, the Common- 


wealth Centre for e-Governance, the Public 
Interest Advocacy Centre, and the Manitoba 


Association of Rights and Liberties. 


In the nearly 20-year history of privacy 
protection since the position of Privacy 
Commissioner was created under the Privacy 
Act in 1983, a convention has been established 
that when the Privacy Commissioner points 
out that a practice or an initiative is inconsistent 


with privacy rights, the Government pays heed. 


That's the way the system is supposed to 
work. I am an ombudsman, mandated by 
Parliament, whose role with regard to the 
federal Government is normally carried out 
primarily through persuasion and co-operative 
discussion behind the scenes. Like my 
predecessors, that is the way I have sought to 
operate since my appointment. I have recom- 
mended to ministers and senior Government 
officials specific solutions to enable them to 
achieve their legitimate policy objectives in 
ways that are more respectful of privacy rights. 
This has produced many successful outcomes 
which, by the very nature of the process, do 


not come publicly to light. 


But in its approach to the aftermath of 
September 11, the Government has increas- 
ingly been turning its back on the cooperative 
nature of the federal privacy protection system 
by flatly refusing to pay attention. In each of 
the instances where I have been obliged to 
publicly criticize the Government for failing 


to respect the privacy rights of Canadians, 
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GOVERNMENTAL DISREGARD FOR CRUCIALLY IMPORTANT PRIVACY RIGHTS IS 


MOVING BEYOND ISOLATED INSTANCES AND BECOMING SYSTEMATIC. 


TAGS= PUG Si A 


FUNDAMENTAL RIGHT OF EVERY CANADIAN PROFOUNDLY AT RISK. 


it was only after I had first made every 
effort to persuade the minister responsible 
with carefully reasoned arguments and 


had my expressions of concern ignored or 


brushed aside. 


Now I am informing Parliament that there 1s 
every appearance that governmental disregard 
for crucially important privacy rights is mov- 
ing beyond isolated instances and becoming 
systematic. This puts a fundamental right 

of every Canadian profoundly at risk. It is a 


trend that urgently needs to be reversed. 


If the Government can, with impunity and 
without provoking the strongest response 
from Parliament, simply brush aside the 
Privacy Commissioner's warnings and do as 
it pleases, then privacy protection in this 
country will be progressively weakened, and 


worse and worse intrusions will be inevitable. 


In the months immediately following 
September 11, I was in fact quite optimistic 
that, with regard to privacy, the Government 
was on the whole being balanced and 
thoughtful in its response. But now the 


floodgates appear to have burst. 


Now “September 11” is invoked as a kind of 
magic incantation to stifle debate, disparage 
critical analysis and persuade us that we live 
in a suddenly new world where the old rules 


cannot apply. 


If Parliament and the public at large have 
been slow to react, it is probably because for 
most people, most of the time, privacy is a 
pretty abstract concept. Like our health, it’s 
something we tend not to think about until 
we lose it — and then discover that our lives 
have been very unpleasantly, and perhaps 


irretrievably, altered. 


But though we tend to take it for granted, 
privacy — the right to control access to 
ourselves and to personal information about 
us — is at the very core of our lives. It is a 
fundamental human right precisely because 
it is an innate human need, an essential con- 
dition of our freedom, our dignity and our 


sense of well-being. 


If someone intrudes on our privacy — by 
peering into our home, going through the 
personal things in our office desk, reading 
over our shoulder on a bus or airplane, or 
eavesdropping on our conversation — we feel 


uncomfortable, even violated. 


Imagine, then, how we will feel if it becomes 
routine for bureaucrats, police officers and 
other agents of the state to paw through all 
the details of our lives: where and when we 
travel, and with whom; who are the friends 
and acquaintances with whom we have 
telephone conversations or e-mail correspon- 
dence; what we are interested in reading or 


researching; where we like to go and what we 


like to do. 
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A popular response is: “If you have nothing to 


hide, you have nothing to fear.” 


By that reasoning, of course, we shouldn't 
mind if the police were free to come into our 
homes at any time just to look around, if all 
our telephone conversations were monitored, 
if all our mail were read, if all the protections 
developed over centuries were swept away. It’s 
only a difference of degree from the intrusions 


already being implemented or considered. 


The truth is that we a// do have something 

to hide, not because it’s criminal or even 
shameful, but simply because it’s private. We 
carefully calibrate what we reveal about our- 
selves to others. Most of us are only willing 
to have a few things known about us by a 
stranger, more by an acquaintance, and the 
most by a very close friend or a romantic 
partner. The right not to be known against 
our will — indeed, the right to be anonymous 
except when we choose to identify ourselves — 
is at the very core of human dignity, autonomy 


and freedom. 


If we allow the state to sweep away the normal 
walls of privacy that protect the details of our 
lives, we will consign ourselves psychologically 
to living in a fishbowl. Even if we suffered 

no other specific harm as a result, that alone 
would profoundly change how we feel. 
Anyone who has lived in a totalitarian society 
can attest that what often felt most oppressive 


was precisely the lack of privacy. 


But there also will be tangible, specific harm. 


The more information government compiles 
about us, the more of it will be wrong. That's 


simply a fact of life. 


Several years ago, after the existence of 
Human Resources Development Canada’s 
“Longitudinal Labour Force File” was brought 
to light by my predecessor, many people 
demanded to see the information that had 
been held about them. They were astonished 
by the number of factual errors. That was only 
a research database, so its inaccuracies probably 
would have remained relatively benign even if 


it had not been dismantled. 


But if our privacy becomes ever more system- 
atically invaded by the state for purposes of 

assessing our behavior and making judgments 
about us, wrong information and misinterpre- 


tations will have potential consequences. 


If information that is actually about someone 
else is wrongly applied to us, if wrong facts 
make it appear that we've done things we 
havent, if perfectly innocent behavior is mis- 
interpreted as suspicious because authorities 
don’t know our reasons or our circumstances, 
we will be at risk of finding ourselves in trouble 
in a society where everyone is regarded as a 
suspect. By the time we clear our names and 
establish our innocence, we may have suffered 


irreparable financial or social harm. 


IF WE HAVE TO LIVE OUR LIVES WEIGHING EVERY ACTION, 


EVERY HUMAN CONTACT, 
SPOUT It, ANAEYZE EN, 


Worse yet, we may never know what negative 
assumptions or judgments have been made 
about us in state files. Under exemptions to 
the general right of access under the Privacy 
Act, Canadians do not have the right to see 
the personal information that the Government 
holds about them if it pertains to national 


security or an ongoing investigation. 


Decisions detrimental to us may be made on 
the basis of wrong facts, incomplete or out-of- 
context information or incorrect assumptions, 
without our ever having the chance to find 


out about it, let alone to set the record straight. 


That possibility alone will, over time, make 
us increasingly think twice about what we 
do, where we go, with whom we associate, 
because we will learn to be concerned about 
how it might look to the ubiquitous watchers 


of the state. 


m You stopped briefly in Thailand during a 
business trip, and liked it so much that 
youre thinking of going back on a vacation. 
But might repeat travel to Thailand get you 
flagged by the Governments analysts as a 
possible pedophile going there for the child 
sex trade? Could you find yourself detained 
for questioning every time you travel? 
Might you be denied security clearances, 


or refused entry into the United States? 
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POSS DBLY MESCONST RUE IT; 
It TO OUR DETRIMENT, WE ARE 


m Youre passing time browsing on the 
Internet and youre idly curious about what 
kind of propaganda in favour of al-Qaeda 
various extremists might be putting out. 
But could visiting such Web sites get you 
identified as a potential terrorist yourself 


and bring CSIS or RCMP officers knock- 


ing on your door? 


m Youre stopped on the street by a stranger 
asking for directions. But if by then prolif- 
erating street video surveillance cameras are 
linked to biometric face-recognition tech- 
nology, what if the system immediately 
identifies the stranger as a known or sus- 
pected terrorist? If the police officer then 
calls up your name and address by match- 
ing your onscreen image to your driver's 
license or passport photo, will you go into 
security files yourself as a suspicious indi- 
vidual who had a street meeting with a 
terrorism suspect? Would you do better to 
keep walking whenever any stranger tries 


to talk to you? 


The bottom line is this: If we have to live our 
lives weighing every action, every communt- 
cation, every human contact, wondering what 
agents of the state might find out about it, 
analyze it, judge it, possibly misconstrue it, 
and somehow use it to our detriment, we are 


not truly free. 
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That sort of life is characteristic of totalitarian 
countries, not a free and open society like 
Canada. But that is where we are inexorably 
headed, if the Government’s current initiatives 


are allowed to proceed. 


Let me very briefly address the specifics of 
these objectionable initiatives, before suggest- 
ing some broader considerations that I believe 
should guide us in the post-September 11 


environment. 


The CCRA “Big Brother”database 


In late 2001, under amendments to the 
Customs Act, Customs officers of the CCRA 
were given access to Advance Passenger 
Information (API) and the far more detailed 
Passenger Name Record (PNR) about every 
passenger flying into Canada from a foreign 
destination. The stated purpose of this was to 
facilitate identifying individuals who merit 
more careful questioning or examination 


on arrival. 


When this legislation was before Parliament, 

I sought and received a formal written under- 
taking from. the CCRA that, except in those 
relatively few instances where this API/PNR 
information did in fact cause an individual to 
be identified for secondary screening, it would 
all be destroyed within 24 hours. On the basis 
of this unequivocal undertaking that there 
would be no widespread retention, I did not 
express any privacy objection to providing 


Customs with this passenger information and 


did not find it necessary to appear before the 
House and Senate committees that studied 


the proposed amendments. 


Last summer, the CCRA informed me that, 
contrary to its past undertaking, it has 
decided to keep all API/PNR information 
about Canadian travellers for six years in a 


massive new database. 


All this personal information — more than 

30 data elements including every destination 
to which we travel, who we travel with, how 
we pay for the tickets (sometimes including 
credit card numbers), what contact numbers 
we provide, even any dietary preferences or 
health-related requirements we communicate 
to the airline — will be available for an almost 
limitless range of governmental purposes 
under the broad information-sharing provi- 


sions of the Customs Act. 


Those purposes, by the Government’s own 
account, include everything from routine 
income tax investigations to trying to 

flag Canadians as potential pedophiles or 
money launderers solely on the basis of 


their travel patterns. 


This is unprecedented. The Government of 
Canada has absolutely no business creating a 
massive database of personal information 
about all law-abiding Canadians that is col- 
lected without our consent from third parties, 
not to provide us with any service but simply 
to have it available to use against us if it 


ever becomes expedient to do so. Compiling 
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IT IS DIFFICULT TO IMAGINE A MORE FLAGRANT DISREGARD FOR THE RIGHTS OF 


CANADIANS. 


dossiers on the private activities of all law- 
abiding citizens is the sort of thing the Stasi 
secret police used to do in the former East 
Germany. It has no place in a free and demo- 


cratic society. 


The CCRA’s purported reason for creating 
this database is “forensic”: In the event that 
there is a terrorist attack and some of the per- 
petrators are known, it wants to be able to use 
this database in search of any accomplices or 
associates. The CCRA has absolutely no man- 
date under the Customs Act to gather informa- 
tion for this sort of after-the-fact anti-terrorist 


forensic investigation. 


But I have repeatedly asked Revenue Minister 
Elinor Caplan at least to limit the uses of this 
database to this exceptional anti-terrorist pur- 
pose, by strictly exempting it from the normal 
information-sharing provisions of the Customs 


Act. She flatly refuses. 


The creation of this CCRA database lacks 
Parliamentary authority. It contravenes the 
Privacy Act. And there is overwhelming reason 


to believe that it is contrary to the Canadian 


Charter of Rights and Freedoms. 


I have provided to Minister Caplan and to the 
Government, and made public, three separate 
independent legal opinions from the most 
eminent of authorities: retired Supreme Court 
Justice Gérard V. La Forest, who wrote many 
of the Court’s most important decisions on 


privacy rights; former federal Deputy Minister 


THIS DATABASE IS LEGALLY WRONG AND MORALLY WRONG. 


of Justice Roger Tassé, who played a key role 
in drafting the Canadian Charter of Rights 

and Freedoms; and Hon. Marc Lalonde, who 
was a highly respected Minister of Justice in 
the Trudeau cabinet. All three state that this 
database clearly appears to be in violation of 
the Charter. This unprecedented trilogy of 


opinions has met with apparent indifference. 


It is difficult to imagine a more flagrant 
disregard for the rights of Canadians. This 
database is legally wrong and morally wrong. 
If the Government can get away with system- 
atically logging and analyzing all the foreign 
travel activities of every law-abiding citizen, 
then no other private activity will long be safe 
from being included in the same personal 
dossiers — our shopping, our banking, our 
communications, our movements within the 
country. The “Big Brother” society will be 


irrevocably upon us. 


Bill C-17, the Public Safety Act, 2002 
In the Public Safety Act, 2002, Bill C-17, the 


Government has reintroduced, with only 
minimal changes, a provision from the 
previous Bill C-55 that would give the RCMP 
and CSIS unrestricted access to the personal 
information held by airlines about all 
Canadian air travellers on domestic as well as 


international flights. 


I have raised no objection to the primary 
purpose of this provision, section Ao). 
which is to enable the RCMP and CSIS to use 


this passenger information for anti-terrorist 
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“transportation security” and “national 
security’ screening. But my concern is that 
the RCMP would also be expressly empow- 
ered to use this information to seek out persons 
wanted on warrants for Criminal Code offences 
that have nothing to do with terrorism, trans- 


portation security or national security. 


The implications of this are extraordinarily 
far-reaching. In Canada, it is well established 
that we are not required to identify ourselves 
to police unless we are being arrested or we 
are carrying out a licensed activity such as 
driving. This right to anonymity with regard 
to the state is a crucial privacy right. But 
since we are required to identify ourselves to 
airlines as a condition of air travel and since 
section 4.82 would give the RCMP unre- 
stricted access to the passenger information 
obtained by airlines, this would set the 
extraordinarily privacy-invasive precedent 

of effectively requiring compulsory self- 


identification to the police. 


I am prepared, though I seriously doubt its 
effectiveness, to accept this as an exceptional 
measure that can be justified in the wake 

of September 11 for the limited and specific 
purposes of aviation security and national 
security against terrorism. But I can find 

no reason why the use of this de facto 
self-identification to the police should be 
extended to searching for individuals who are 
of interest to the state because they are the 


subject of warrants for Criminal Code offences 
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unrelated to terrorism. That has the same 
effect as requiring us to notify the police 
every time we travel, so that they can check 


whether we are wanted for something. 


If the police were able to carry out their regu- 
lar Criminal Code law enforcement duties 
without this new power before September 11, 


they should likewise be able to do so now. 


If we accept, instead, the principle that air 
travellers within Canada can now in effect be 
forced by law to identify themselves to police 
for scrutiny against lists of wanted suspects, 
then there is nothing to prevent the same logic 
from being applied in future to other modes 
of transportation. Particularly since this provi- 
sion might well discourage wanted individuals 
from travelling by air, why not extend the 
same scrutiny to train travellers, bus passengers 


or anyone renting a car? 


Indeed, the precedent set by this provision 
could ultimately open the door to practices 
similar to those that exist in societies where 
police routinely board trains, establish road- 
blocks or stop people on the street to check 
identification papers in search of anyone of 


interest to the state. 


This is why I have recommended amending 
the bill to remove all reference to warrants 
and thus limit the police to using this passen- 
ger information only to watch for individuals 
who are of concern specifically on grounds of 


anti-terrorism and national security. 


When the Government reintroduced this 
legislation as Bill C-17, it made a number of 
changes. But my recommendations regarding 
section 4.82 were ignored. Instead, the 
Government made two changes that are at 
best cosmetic, and that appear aimed more at 
misleading Canadians than at addressing the 


real issues that are at stake. 


The Government now proposes to have 
regulations limiting slightly the Criminal 
Code offence warrants for which the RCMP 
will be searching. But this does nothing to 
address the fundamental point of principle 
that the police have no business using this 
extraordinary access to personal information 
to search for people wanted on warrants for 


any offences unrelated to terrorism. 


As well, in the new bill the Government has 
removed the “identification of persons for 
whom a warrant has been issued” as a 
“purpose” for accessing passenger information 
under the legislation. But this is meaningless, 
since the RCMP would remain empowered to 
match this information against a database of 
persons wanted on warrants and to use such 


matches to bring about arrests. 


Senior Government officials have repeatedly 
told me that the reference to warrants 1s 
necessary, because otherwise the RCMP 
would be powerless to act if they “inciden- 
tally” came upon the name of a dangerous 
wanted criminal while scanning a passenger 
list for possible terrorists. This argument is 


totally unpersuasive for two reasons. 


COMMISSIONER’S OVERVIEW 


First, if RCMP officers are to examine passen- 
ger information for the sole stated purpose 

of looking for terrorists and security risks, 
they shouldn't be checking passenger names 
against the huge general CPIC database, 
which contains a very wide variety of infor- 
mation including the names of people wanted 
on all sorts of warrants completely unrelated 
to terrorism. They should be looking for 
matches against the much more specific data- 
base that is limited to information only on 
known or suspected terrorists and other indi- 


viduals identified as security risks. 


To say that trolling in CPIC might cause the 
RCMP to “incidentally” find individuals 
wanted on warrants for Criminal Code offences, 
is like saying that there is something “inciden- 
tal” about tossing a fishing line into a pond 


stocked with trout and pulling out a trout. 


Second, my legal advisors have confirmed 
that peace officers including the RCMP have 
a well-established Common Law power — 
indeed a duty — to take appropriate action to 
apprehend any potentially dangerous individ- 
ual they discover to be wanted on a warrant. 
The reference to warrants in section 4.82 of 
Bill C-17 is therefore quite redundant and 
unnecessary — unless, of course, the RCMP 
are to make a systematic practice of searching 
passenger information for individuals wanted 
on outstanding warrants, contrary to the 
stated purpose of giving them access to 


this information. 
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The “Lawful Access” Initiative 


Under the “Lawful Access” proposals that have 
been put forward jointly by the Minister of 
Justice, the Solicitor General and the Minister 
of Industry, the Internet activities and cellular 
phone communications of all law-abiding 
Canadians would be subject to unprecedented 


scrutiny by the state. 


I have responded formally, publicly and in 
detail to these proposals, and will not do so 
again here. But I have received absolutely no 
indication that the grave privacy concerns I 
have expressed will be heeded, and I have con- 
siderable reason to fear that the Government 


intends to simply press ahead. 


The interception and monitoring of private 
communications ts a highly intrusive activity 
that strikes at the heart of the right to privacy. 
If Canadians can no longer feel secure that 
their Web surfing and their electronic com- 
munications are indeed private, this will mark 
a grave, needless and unjustifiable deterioration 


of privacy rights in our country. 


The Government has presented no evidence 
to demonstrate why the massive new intru- 


sions It proposes are necessary. 


I recognize that new information technologies 
may pose a challenge to conventional inter- 
ception and surveillance techniques used by 
police forces and national security agencies. It 
appears reasonable that law enforcement and 


national security agencies should have the 
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same ability to intercept and monitor e-mail 
and cellular telephone communications, with 
the same kind of judicial authorization based 
on the same criteria, as is now the case with 
regard to letter mail and conventional tele- 


phone communications. 


But agents of the state in Canada cannot 
order Canada Post to photocopy the address 
on every envelope we send, nor can they order 
bookstores to keep a record of every book we 
buy, let alone of every page of every magazine 
we leaf through. There is no reason why they 
should be able to exercise such powers with 
regard to every e-mail someone sends or every 


Web site he or she visits. 


I do not see any reason why e-mails should be 
subject to a lower standard of privacy protec- 
tion than letters or telephone calls. And I do 
not see why Internet browsing should be 
subject to a lower standard of protection than 
book purchasing or researching in a reference 
library. Canadians should not be subject to 
greater state monitoring or scrutiny just 
because they choose to use new communica- 


tion technologies. 


In a free and democratic society like Canada, 
the interception and monitoring of private 
communications carries extraordinarily strong 
symbolic and psychological implications, in 
addition to the obvious practical ones. 
Dramatically increasing that interception and 
monitoring, without any clearly demonstrated 


need or justification, is unacceptable. 


I CAN FIND NO JUSTIFICATION FOR A NATIONAL IDENTITY CARD, 
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Identity Cards 


It is a matter of very considerable dismay 
that Citizenship and Immigration Minister 
Denis Coderre, presumably on behalf of the 
Government, is pressing for a “debate” on 
establishing a mandatory national identity 
card, complete with biometric identifiers, for 


all Canadians. 


Given the Government’s current behavior on 
other privacy matters, it is difficult to avoid 
fearing that this means that it wishes to intro- 


duce such a card. 


That would be another huge blow to privacy 
rights. In Canada, we are not required to 
carry any identification — let alone to identify 
ourselves on demand — unless we are carrying 
out a licensed activity such as driving. 
Introducing a national identity card, even if 
it were “voluntary” at first, would push us 
toward becoming the kind of society where 
the police can stop anyone on the street and 


demand, “Your papers, please.” 
papers, p 


The notion of the Government of Canada 
fingerprinting or eyeball-scanning every 
citizen for such a card is, of course, all the 


more abhorrent. 


I can find no justification for a national iden- 
tity card, especially since it is absolutely 
useless as an anti-terrorist measure. As the 
perpetrators of the September 11 attacks 
demonstrated, terrorists are not necessarily 


previously identifiable as such. Every citizen 
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would be able to obtain and display an identity 
card, regardless of his or her possible terrorist 
proclivities, but of course it wouldnt list occu- 
pation as “terrorist.” And short-term visitors 


to Canada wouldn't have such a card at all. 


Rather than a “debate” about a grave and 
needless intrusion, Canada needs clear 
acknowledgement by the Government that 
the fundamental privacy right of anonymity 
as we go about our day-to-day lives is too 


important to abrogate for no apparent reason. 


Video Surveillance 


I have been trying for more than a year to 
persuade the Government to direct the RCMP 
to stop its continuous video surveillance of 
law-abiding citizens on a public street in 


Kelowna, British Columbia. 


I believe that general video surveillance of our 
public streets and public gathering places by 
the police or other public authorities is an 
enormous threat to the fundamental human 


right of privacy in our society. 


We have the right as Canadians to walk along 
our public streets without being systematically 
observed by police. If we lose that, we lose a 


crucial part of our privacy and our freedom. 


Last March, I sought the advice of retired 
Supreme Court Justice Gérard La Forest, 
who wrote many of the Supreme Court's 
most important decisions on privacy rights. 
Mr. La Forest advised me that, in his learned 


opinion, what the RCMP is doing in Kelowna 
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is not only a serious violation of privacy 
rights, but is also a clear contravention of the 


Canadian Charter of Rights and Freedoms. 


I made that legal opinion public last April, 
and it too was ignored by the RCMP and the 
Government. Since as Privacy Commissioner 
I am mandated by Parliament to oversee and 
defend the privacy rights of Canadians, and 
since I have the strongest possible reason to 
believe that what the RCMP is doing in 
Kelowna not only violates privacy rights in 
general but is unconstitutional, my only 
remaining recourse is to ask the courts to put 


a stop to It. 


Accordingly, in July I initiated in the Supreme 
Court of British Columbia in Kelowna, an 
action to declare the RCMP’s video surveil- 
lance activities in Kelowna unconstitutional as 
a violation of the Canadian Charter of Rights 


and Freedoms and international covenants. 


Remarkably, the Government has taken the 
position that it challenges my right to take 
this action. It takes the position that as 
Privacy Commissioner I am a “statutory 
body” limited to doing only what is expressly 


spelled out in the Privacy Act. 


My legal advisors inform me that they are 
confident that this position is not correct in 
law. But I have strong reason to believe that 
if my right to initiate this Charter challenge 
is upheld by the court, the Government 


intends to file a series of appeals with a view 
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to preventing this important case from being 


heard on its merits for years to come. 


That would be reprehensible. At a time when 
video surveillance of public streets is becom- 
ing a fad that appeals to many municipalities 
across Canada, Canadians are entitled to have 
this important question about their privacy 
rights under the Charter adjudicated without 
delay. As well, police forces and municipalities 
across the country should themselves not be 
subjected to prolonged and needless uncer- 
tainty about the constitutional legality of 
what they are contemplating. They want and 


need a court decision. 


I have therefore repeatedly asked the 

Minister of Justice and Attorney General, 

Mr. Cauchon, to withdraw this procedural 
objection and allow the case to be promptly 
determined on its merits. I have recently been 


informed that he refuses to do this. 


Instead the Government, through the Minister 
of Justice, is taking the extraordinary position 
that the Privacy Commissioner of Canada 
should not have the right to ask the courts to 
determine whether a grave intrusion on 
privacy violates the privacy protections in the 


Canadian Charter of Rights and Freedoms. 


I urge the Government to reconsider. 
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With regard to all these initiatives except 

street video surveillance, Government officials 
have repeatedly told me privately that pressure 
from the United States government is a strong 


motivating factor. 


Let me be blunt: “The United States made us 
do it” cannot be a sufficient or acceptable 
justification for the Government to intrude on 


a fundamental right of Canadians. 
Canada is a sovereign country. 


Throughout our history, there have been 
important instances where Canada has found 
it necessary to take a position different from 
that of the United States on matters involving 
rights or values. It is surely no exaggeration to 
say that if our leaders had instead consistently 
succumbed to U.S. pressures to adopt that 
country’s approaches as our own, there would 


today be no distinct Canada as we know it. 


The same is true with regard to appropriate 
respect for fundamental rights in the wake of 
September 11. If the U.S. government ts 
indeed exerting pressure on Canada to take 
steps that cannot be justified on their merits 
in accordance with our Canadian values and 
rights, then Canadians are entitled to expect 
that the Government will remain steadfast in 
meeting its responsibilities rather than trample 


on their rights out of fear of U.S. retaliation. 


Canadians are entitled, as well, to expect that 


the Government will think very carefully and 


FUNDAMENTAL RIGHT OF CANADIANS. 


critically before accepting the U.S. premise that 
we are all “at war” against terrorism and that 
it is therefore reasonable to impose wartime 


restrictions on privacy and other rights. 


The difficulty is that terrorism is not an 
enemy, but a phenomenon. Wars that are 
fought between nation-states, or even civil 
wars that are fought within a country, are 
finite. They may drag on for a long time, but 
eventually someone wins and someone loses or 
4a stalemate is identified, and the terms of 


peace are established. 


But if we apply the premises of war to the 
challenges of dealing with terrorism, we will 
by definition be committing ourselves to a 
“war” with no possible end — because there is 
no single, definable enemy. Any group of indi- 
viduals, or even any single individual, that is 
willing to commit public mayhem in support 
of any particular cause is thereby a terrorist. 
And so for every particular group or faction of 
terrorists that is neutralized, another one may 


readily spring up. 


This means that there can never be a moment 
when it will be possible to declare a definitive 
victory in a “war” against terrorism. In fact, 
such a “war” will be eerily reminiscent of 
Orwell’s 1984, which takes place against the 
background of a mysterious chronic war in 
which it is never clear just who the enemy is 


or who is winning or losing. 
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We need to recognize, therefore, that any 
intrusions or limitations on the fundamental 
human right of privacy that are imposed as a 
purported wartime measure against terrorism 
will likely never be rescinded. What we are 
confronting is the prospect of a permanent 


redefinition of Canadian society. 


And what will this redefinition achieve in 


terms of protecting us? 


The reality is that there are no security meas- 
ures that can provide complete protection 
against murderous individuals or groups who 
are willing to lose their own lives to make 
their point. Even the most repressive, authori- 
tarian regimes have not been able to immunize 
themselves fully against terrorism. At the 

same time, we also need to keep the risks in 
perspective: In any scenario, the average 
Canadian is far more likely to come to harm in 


a traffic accident than at the hands of terrorists. 


This is not to suggest that we should take a 
cavalier approach to terrorism, but rather that 


we must take a balanced one. 


When people are worried about their safety, 
when we have seen the horrors of which 
today’s breed of terrorists are capable — and 
there may be more — it’s easy to lose perspec- 
tive. It’s easy to fall into the trap of thinking 
that security is all that matters and that 


human rights such as privacy are a luxury. 


But such extremes can only reward and 


encourage terrorism, not diminish it. They 
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can only devastate our lives, without com- 


mensurately safeguarding them. 


Of course we all want to be safe. But we could 
be safer from terrorism — perhaps — if we 
permanently evacuated all the high-rise office 
towers, if we closed down the subways, if we 


forever grounded all airplanes. 


Yet no reasonable person would be likely to 
argue for adopting such measures. Wed say, 
“We want to be safe, yes — but not at the price 


of sacrificing our whole way of life.” 


The same reasoning should apply, in my 
view, to arguments that privacy should 
indiscriminately be sacrificed on the altar of 


enhanced security. 


The essence of terrorism is the impact it is 
intended to have on those who witness it — 
the capacity to frighten, to demoralize, to sap 
the will of a society to resist whatever it is that 


the terrorists want. 


In the case of the September 11 breed of ter- 
rorists, by all accounts it is the whole nature of 
American society, and by extension of all our 
Western societies, that they seek to attack and 
undermine. Our freedoms and values, very 


much including privacy, are precisely the target. 


To keep that from becoming a reality for 
Canada, we must guard against falling prey to 
the illusion that wholesale erosion of privacy is 
a reasonable, necessary or effective way to 


enhance security. 


CoMMISSIONER’S OVERVIEW 


WE MUST GUARD AGAINST THE EAGERNESS OF LAW ENFORCEMENT BODIES 
AND OTHER AGENCIES OF THE STATE TO USE THE RESPONSE TO SEPTEMBER 11°AS A 


We must guard against the demonstrated 
tendency of the Government to create new 
databases of privacy-invasive information on 
justified, exceptional grounds of enhancing 
security, and then seek to use that information 
for a whole range of other law enforcement 

or governmental purposes that have nothing 
to do with anti-terrorism — simply because 


it’s there. 


And we must guard against the eagerness of 
law enforcement bodies and other agencies of 
the state to use the response to September 11 
as a Trojan horse for acquiring new invasive 
powers or abolishing established safeguards 


simply because it suits them to do so. 


Perhaps it will be necessary to accept some 
new intrusive measures to enhance security. 
But these choices must be made calmly, care- 
fully and case by case. The burden of proof 
must always be on those who suggest that 
some new intrusion or limitation on privacy is 


needed in the name of security. 


I have suggested that any such proposed 


measure must meet a four-part LESE: 


It must be demonstrably necessary in order to 


meet some specific need. 


It must be demonstrably likely to be effective 
in achieving its intended purpose. In other 
words, it must be likely to actually make us 


significantly safer, not just make us feel safer. 


TROJAN HORSE FOR ACQUIRING NEW INVASIVE POWERS. 


The intrusion on privacy must be propor- 


tional to the security benefit to be derived. 


And it must be demonstrable that no other, 
less privacy-intrusive, measure would suffice 


to achieve the same purpose. 


Necessity, effectiveness, proportionality, and 
lack of a less privacy-invasive alternative — this 
is the four-part test that I believe can allow us 
to take all appropriate measures to enhance 
security, without unduly sacrificing privacy. 

It is a test on which I believe all of us — every 
Canadian, and particularly every Member 

of Parliament and Senator, of every party 

and every political philosophy — must 


resolutely insist. 


One of the clearest lessons of history is that 
the greatest threats to liberty come not when 
times are tranquil and all is well, but in times 
of turmoil, when fidelity to values and princi- 
ple seems an extravagance we can ill afford. 
History also teaches us that whenever we have 
given in to that kind of thinking, we have 


lived to regret it. 


At the time, the loss of freedom might seem 
small, trivial even, when placed in the balance 
of the security we seek. And yet these incre- 
mental threats are the ones we must be most 
vigilant in resisting. The 18" Century politi- 
cal philosopher Edmund Burke understood 
this danger when he wrote, “The true danger 
is when liberty is nibbled away, for expedi- 


ence, and by parts.” 


We 
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U.S. Supreme Court Justice Thurgood 
Marshall eloquently made the same point 
much more recently when he said: “History 
teaches that grave threats to liberty often 
come in times of urgency, when constitutional 


rights seem too extravagant to endure.” 


We are now living in such a time. Canada has, 
over the course of its history, developed a very 
healthy balance between the powers of the 
state and the rights of the individual. Our 
crime rates have been comparatively low and 
our social order has been strong, while indi- 
vidual freedom and diversity have flourished 
to a degree that is the envy of much of the 
world. That is why immigrants from so many 
other societies have chosen to make Canada 


their home. 


But now we face having that successful bal- 
ance changed, by having Canada transformed 
into a society where the state is much more 
intrusive and where individual rights and free- 
doms are correspondingly reduced. And we 
face having this transformation occur without 
the analysis, debate or even understanding 


that it deserves. 


Sadly, most of the ministers who are making 
these decisions are not thinking sufficiently 
about the deeper implications of what they 


are doing. While I am continuing to maintain 
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dialogue with the relevant officials in pursuit 
of appropriate changes, at the time this Report 
goes to press no discernible progress has 


been made. 


Even with the help and support of my provin- 
cial and territorial colleagues, other privacy 
advocates and many thoughtful members of 
the news media — to all of whom I am pro- 
foundly grateful — as an ombudsman I do not 
have the power to stop what the Government 


is doing in its unprecedented assault on privacy. 


That power lies in Parliamentary insistence 
and public outcry. It is my hope that these 
will be exercised with the greatest urgency. 
It is also my hope that, even at this late 
moment, the Government will have the 
courage and the good sense to recognize 
that there is no shame in rethinking and 
revising insufficiently-considered policies. 
There can be shame only in insisting, 
instead, on treading needlessly on a funda- 


mental right of Canadians. 


For my part, my role and my duty are to 
bear true witness to what is taking place, and 
to fight against it with every appropriate 
means available to me. This I will continue 
to do ceaselessly, and with all the vigour at 


my disposal. 


INTRODUCTION 


HE Privacy ACT PROTECTS 

individuals’ privacy 

with respect to personal 
information held by federal 


Government institutions. 


The Act, which has been in force 
since 1983, governs how federal 
institutions collect, use, disclose and 
dispose of personal information, 
and gives people the right to access 
and request corrections to their 


personal information. 


As Privacy Commissioner, I receive 
and investigate complaints from 
individuals who believe their rights 
under the Act have been violated. 

I can also initiate a complaint and 
an investigation myself, in any 
situation where there are reasonable 
erounds to believe the Act has 


been violated. 
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First and foremost, I am an ombudsman, and 
whenever possible, complaints are resolved 
through mediation and negotiation. But I also 
have broad powers of investigation under the 
Act. As Privacy Commissioner I can subpoena 
witnesses, compel testimony and enter premises 
to obtain documents and conduct interviews. 
Obstructing one of my investigations is an 
offence under the Act. Although the Act does 
not include the power to order compliance, 

I can recommend changes to the way Govern- 
ment institutions handle personal information, 


based on my findings. 


As well, I have a mandate to conduct periodic 
audits of federal institutions to determine 
their compliance with the Act and, on the 


basis of my findings, I can recommend changes. 


The Act requires me to submit an Annual 
Report to Parliament on the activities of my 
Office in the previous fiscal year. This current 
report covers the period from April 1, 2001 to 
March 31, 2002 for the Privacy Act. 
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INVESTIGATIONS 


My Investigations Branch investigates 
individuals’ complaints under section 29 of 
the Privacy Act (and under section 11 of the 
Personal Information Protection and Electronic 
Documents Act, which I will discuss later in 


the report). 


Through these investigations, I determine 
whether individuals’ privacy rights have been 
violated or whether theyve been properly 
accorded access to their personal information. 
Where people's privacy rights have been 
violated, I look for ways to provide redress 
for them and to prevent violations from 


happening again. 


I have authority under the Act to administer 
oaths, receive evidence and enter premises 
where appropriate. I can also examine or obtain 


copies of records found on any premises. 


‘To date, we have had voluntary co-operation 
and all complaints under the Privacy Act have 
been resolved without our having to use these 


formal investigative powers. 
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COMPLAINTS UNDER THE 
Privacy AcT 


During the fiscal year of April 1, 2001 to 
March 31, 2002, we received a total of 1,213 
complaints under the Privacy Act. Of those, 
45 per cent concerned denial of access to per- 
sonal information, 20 per cent were related to 
issues of collection, use, disclosure, retention 
and disposal of personal information, and the 
remaining 35 per cent concerned failure to 
respond to an access request within the legis- 


lated timeframes set out in the Act. 


Investigations staff completed investigations 
of 1,673 complaints, an increase of 8 per cent 
over the previous year. Of those, 703 dealt 
with denial of access, 397 concerned issues 
related to collection, use, disclosure, retention 
and disposal of personal information, 571 
were about lack of timeliness in responding 
to requests to obtain access to personal infor- 
mation and two dealt with other matters 
including an allegation of retaliation against 
an individual for submitting an access request. 


These complaints were concluded as follows: 


Not well-founded: 445 
Well-founded: 668 
Well-founded/Resolved: 91 
Resolved: 26 
Settled during the course 

of the investigation: 344 
Discontinued: 32 
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DEFINITIONS OF FINDINGS UNDER THE Privacy ACT 


Not well-founded: A finding that a complaint is not well-founded means that the investigation 
uncovered no evidence to lead me to conclude that the Government institution violated the 


complainant’s rights under the Privacy Act. 


Well-founded: A finding that a complaint is well-founded means that the Government institu- 
tion failed to respect the Privacy Act rights of an individual. This would also be my finding 
in a situation where the Government institution refuses to grant access to personal information, 
despite my recommendation that it be released. In such a case, my next step could be to seek 


a review by the Federal Court of Canada. 


Well-founded/Resolved: I will find a complaint to be well-founded/resolved when the allegations 
are substantiated by the investigation and the Government institution has agreed to take 


corrective measures to rectify the problem. 


Resolved: Resolved is a formal finding that reflects my role as an ombudsman. It’s for those com- 
plaints where well-founded would be too harsh to fit what essentially is a miscommunication 
or misunderstanding. It means that my Office, after a full and thorough investigation, has 


helped negotiate a solution that satisfies all the parties. 


Settled during the course of the investigation: This is not a formal finding but an acceptable 
means to dispose of a complaint when the investigation is completed, and the complainant 
is satished with the efforts of my Office and doesn’t wish to pursue the issue any further. 
The complainant retains the right to request a formal finding. When that happens, the inves- 
tigator re-opens the file, and submits a formal report, and I report the findings in a letter to 


the complainant. 


Discontinued: This means that the investigation was terminated before all the allegations were 
fully investigated. A case may be discontinued for any number of reasons — for instance, the 
complainant may no longer be interested in pursuing the matter or cannot be located to pro- 
vide additional information critical to reaching a conclusion. I don't issue a formal finding in 


discontinued complaints. 
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In my report last year, I expressed concerns 
that a few Government departments and 
agencies — most notably, Correctional Service 
Canada (CSC), the Department of National 
Defence (DND), the Canada Customs and 
Revenue Agency (CCRA) and Human 
Resources Development Canada (HRDC) — 
had been particularly lax in responding to 


access requests in a timely fashion. 


There are indications that these departments 
and agencies are improving their turnaround 
times as a result of special measures they 
have put in place to deal with their backlogs. 
We received fewer time-limit complaints 
against these institutions this past year, with 
the exception of DND. This fact may indicate 
improved performance, or simply that they 
received fewer requests last year and therefore 
fewer dissatisfied individuals turned to my 
Office for assistance. Regardless, most of 

the time-limit complaints we investigated 
against CSC, DND and HRDC were 
deemed well-founded, a clear indication that 
these institutions are still not meeting their 


obligations under the Privacy Act. 


Ape 


SUMMARY OF SELECT CASES 
UNDER THE Privacy AcT 


Departments accountable for information 
collected under contract 


Despite past reminders, some departments 
still neglect to ensure that personal information 
collected under the contracts they negotiate 
with outside contractors is managed in accor- 
dance with the fair information principles of 


the Privacy Act. 


Those principles require Government institu- 
tions that are subject to the Act to include 


provisions in contracts that: 


m Define ownership of the information — that 
is, all information collected as part of the 
contract belongs to the contracting depart- 
ment or agency and should be turned over 


to it at contract end; 


m Recognize individuals’ rights of access to 
their personal information collected during 


the contract; 
m Restrict further uses of the personal data; 


m Protect the information against unautho- 


rized disclosure; 


em Establish retention and disposal criteria; 


and 


@ Ensure the department's ability to audit 
compliance of the contractor’s management 


of the information collected. 


In one case investigated this past year, an 
employee of Human Resources Development 
Canada (HRDC) complained that she did 
not receive all of her personal information 
gathered by an independent contractor hired 
by the department to conduct a workplace 
assessment. The employee was particularly 
interested in obtaining access to any mention 
of her by other staff in the contractor's inter- 


view notes and questionnaires. 


When interviewed, the contractor admitted 

to destroying all the information except the 
report she produced for HRDC. She did this 
in part because she had promised confiden- 
tiality to the individuals she interviewed, indi- 
cating that their statements would not be 
released, and the contract signed with HRDC 


did not specify otherwise. 


Although HRDC’s policies and procedures on 
contracting out to third parties specify that all 
the provisions of the Privacy Act are to be 
respected, the contractor in this case was not 
aware of HRDC’s obligations under the Act to 
retain the information or grant individuals 
access to their own information. Contractors 
(as well as employees conducting similar 
administrative investigations) must be informed 
that they cannot promise confidentiality and, 
prior to taking statements about an individual, 
they must inform witnesses that their statements 
constitute the other individual’s personal 
information for which rights of access are 


provided by the Privacy Act. The witness then 
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has a choice as to whether or not to provide a 
statement that would include information 


about another individual. 


I concluded that the complaint was well- 
founded and HRDC was accountable for the 
work done under the contract. The contractor's 
failure to retain the information in essence 
resulted in the complainant being denied 

an opportunity to obtain access to her own 


information. 


In a case against the Department of National 
Defence, a military officer sought my assis- 
tance in getting access to his medical records, 
including the notes of an independent medical 
specialist the department hired to provide 

an opinion based on his review of the com- 
plainant’s medical file. When the officer 
submitted his access request, the department 
released the medical records in its file, but 
did not release the specialist’s notes from the 


independent review. 


When I investigated the matter, I learned that 
no effort had been made to get the information 
from the specialist. I interviewed the specialist 
and reviewed his notes, which clearly contained 
personal information about the complainant. 
The specialist claimed that he had not been 
told that the information he gathered as part 
of his review belonged to the department and 
that he should also supply a copy of all the 
information from his file to the department 


for inclusion in its records. Nevertheless, the 
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specialist willingly provided a copy to the 
department so that it could in turn release it 
to the complainant. The complainant was 
pleased to receive the information and did not 


request that we pursue the matter further. 


These two cases serve to remind federal 
departments and agencies that any contracts 
they enter into that require the collection of 
personal information must also include appro- 
priate clauses to satisfy the provisions of the 
Privacy Act. Individuals should be able to 
access their own information whenever it 


is requested. 


RCMP charges fee for traffic analysis report 


A British Columbia man asked the Royal 
Canadian Mounted Police (RCMP) for a copy 
of a traffic analysis report prepared following 
an investigation of a traffic accident in which 
he was involved. The report attempted to 
reconstruct the circumstances surrounding 
the accident, and the man wanted to use it to 
support a civil claim. When he requested a 
copy of this report informally from the RCMP 
detachment where it was prepared, he was 
told there was a $500 fee. He then formally 
requested it under the Privacy Act but was 
refused on the basis that it was exempted under 
section 22(1)(a) of the Act. Section 22(1)(a) 
allows an investigative body such as the 
RCMP to deny access to information about a 
lawful investigation that is less than 20 years 


old. In his letter of complaint, the man cor- 
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rectly asked how the information could be 
available if he paid the $500 fee but not under 
the Privacy Act, to which no fees apply. 


I determined that the RCMP detachment’s 
response to the informal request was based on 
an established fee schedule. When the Privacy 
Act request was received at the RCMP’s Access 
to Information and Privacy Unit in Ottawa, 

it confirmed that the accident was still under 
investigation. The RCMP routinely refuses 
access to information related to ongoing 
investigations. The unit subsequently informed 
the complainant that the report was exempted 
in its entirety under section 22(1)(a) of 

the Act. 


However, upon further inquiries, I learned 
that in August 2000 the RCMP had issued a 
bulletin to all detachments in British 
Columbia that no fee should be collected for 
these reports. This decision followed a 1998 
Supreme Court of British Columbia ruling in 
a case against the RCMP as the municipal 
police force under contract to the province. 
The Court ruled that the fee charged by 

the RCMP for a traffic analysis report was in 
essence a tax disguised as a user fee, and 


therefore was without any legislative authority. 


As a result of our intervention, the RCMP 
provided the man with his own personal 
information in the report, which was all he 


was entitled to receive under the Privacy Act. 


DND improperly retains, uses information 
about pardoned convictions 


I investigated complaints from two Canadian 
Forces members who felt their privacy had 
been violated when the Department of 
National Defence (DND) kept information 
on its files related to their criminal convic- 
tions and subsequently used that information 


to deny them employment opportunities. 


In the first case, the member had been 
selected for a posting with a United Nations 
tour in the Middle East, but just prior to his 
departure the posting was cancelled by his 
base commanding officer. I learned that 
DND’s Military Police discovered the mem- 
ber had been charged with impaired driving 
shortly before his planned departure date and 
had reviewed its records to determine whether 
the man had any other charges against him. 
It found seven references to other criminal 
offences and forwarded this information to 
the base commanding officer. When the com- 
manding officer saw the record, he decided 


against sending the member overseas. 


I determined that two of the offences should 
have been purged from the member's file since 
he had received a pardon for them. The Pardons 
and Clemency Division of the National Parole 
Board had notified DND of these pardons and 
of the department’s requirements under the 
Criminal Records Act to segregate its records 
related to these offences from other criminal 


records in its custody. DND complied but 
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only insofar as reference to the convictions 
was concerned — all the facts related to the 
charges that led to these two convictions 


remained on file. 


Unfortunately, when only the reference to a 
conviction is removed from a record, what 
remains can be misleading to anyone who 

has access to that information. I therefore 
reminded DND that under the Privacy Act it 
is required to ensure that personal informa- 
tion used for an administrative purpose — that 
is, in a way that directly affects the individual 
to whom it relates — is accurate, up-to-date 


and complete. 


As a result of my efforts, DND agreed to 
amend its policy on the retention of informa- 
tion about pardoned convictions to conform 
with both the Privacy Act and the Criminal 
Records Act. 


In the second case, an individual obtained 
information that led him to believe DND 
used information about his convictions under 
the National Defence Act to reject his applica- 
tion for re-engagement in the Canadian 
Forces, despite the fact that he had been 


granted a pardon. 


When I investigated the matter, I confirmed 
that DND had indeed used this information 
in its assessment of his application. I also 
confirmed with the Pardons and Clemency 
Division of the National Parole Board that it 


had granted a pardon to the individual but 
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had neglected to inform DND. I therefore 
asked the National Parole Board to send 
appropriate notifications to DND and the 
National Archives, the current custodian of 
the individual’s military records, so that they 


could amend his records as required. 


CMHC demand for tax information 
inappropriate 


The president of a consulting firm com- 
plained that Canada Mortgage and Housing 
Corporation (CMHC) had asked for an exces- 
sive amount of personal information from sole 
proprietors and partnerships as proponents in 
a Request for Proposal (RFP) process. If the 
lead proponent turned out to be a sole propri- 
etor, that individual was required to provide, 
among other things, copies of his/her income 
tax returns for the last three years and a state- 


ment of net worth. 


I discussed the RFP process with CMHC 

in depth. It was adamant that it was necessary 
to obtain financial information from a lead 
proponent when there was a high degree of 
risk associated with procurement and that it 
must ask for detailed information from a sole 
proprietor just as it did with any other type of 
business. It argued that, for a sole proprietor, 
unlike for a corporation, there was little com- 
prehensive financial information that could be 
used to conduct an accurate risk assessment 
and that the information it was requesting was 


the best and most accurate it could get. 


26 


I agreed that the financial viability of a lead 
proponent had to be assessed to minimize the 
organizations exposure in high-risk cases. 
However, I did not understand how this 
objective was achieved by assessing income tax 
information for a three-year period. An indi- 
vidual may have had substantial revenue over 
three years but income tax information would 
not reveal how the individual disposed of 
that revenue. A proprietor may have had three 
difficult years but could still support the 
financial strains of a contract. An individual 
may also have substantial assets in property or 
non-interest bearing investments that are 


simply not reflected in income tax documents. 


Section 4 of the Privacy Act provides that per- 
sonal information collected by a Government 
institution must relate directly to an operating 
program or activity of the institution. Because 
I did not believe that income tax information 
was of material assistance in helping CMHC 
to assess the quality of a sole proprietor’s 

RFP proposal, I could not conclude that 
CMHC'’s request for that information met the 
requirements of section 4. As a result of my 
investigation, CMHC has amended its pro- 
curement policy and has discontinued the 
practice of requesting income tax returns and 


statements of net worth from sole proprietors. 


It is unacceptable to me that Canadian citizens 
should have to provide copies of their personal 
income tax returns to do business with the 


Government. Under the /ncome Tax Act, 


individuals must divulge a vast amount of 
personal information when completing their 
income tax returns, including a good deal of 
personal information about family members. 
The income tax process is extraordinarily 
intrusive and the use of personal information 
collected for income tax purposes must, in 
my view, be strictly confined to purposes that 
are regulated. At a time when Canadians are 
increasingly concerned about the erosion of 
their personal privacy, I find it untenable that 
an income tax return can be demanded from 
an individual for a purpose other than that 
required by law. Canadians should never be 
required to compromise a fundamental right 


in order to do business with the Government. 


Ultimately, CMHC agreed with my finding 
and halted the practice. Although my investi- 
gation focused on CMHC practices, I was 
aware that other federal Government depart- 
ments and agencies followed similar practices. 
I therefore wrote to the Deputy Minister for 
Public Works and Government Services 
Canada, and to the Secretary of the Treasury 
Board and the Comptroller General of 
Canada, seeking their assistance to ensure 
that this practice is discontinued throughout 
the federal Government. The Treasury Board 
agreed with my view. It indicated that the 
practice was not Government policy and that 
the matter would be raised with other depart- 
ments and agencies. I have also been informed 
by Public Works and Government Services 


that it will discontinue the practice. 
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Inappropriate monitoring of employees’ 
e-mail accounts 


I investigated several complaints from individ- 
uals questioning managers’ authority to search 
Government e-mail accounts during the course 


of administrative investigations. 


In one instance, two employees at the 
Immigration and Refugee Board (IRB) alleged 
that local management improperly retrieved 
copies of confidential e-mail messages they 
had written each other regarding a Privacy 
Act complaint to this Office by one of 


the employees. 


By way of background, one of the employees 
had discovered performance evaluations about 
several of her co-workers on the local com- 
puter network and immediately notified her 
union’s representative, another IRB employee. 
The representative obtained copies of the 
evaluations to support his complaint to this 
Office about the improper disclosure of 


personal information. 


My investigation of that complaint deter- 
mined that the IRB had not taken adequate 
steps to restrict access to the information 


and I concluded that the complaint was 


well-founded. 


Management of the IRB fixed the computer 
glitch that had created the problem as soon as 
it was notified of the substance of this com- 


plaint. Management also initiated an inquiry 
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into the incident to establish whether any dis- 
ciplinary action should be taken against the 
employee for disclosing the evaluations to the 
union representative. On instruction, the local 
information technology manager searched and 
retrieved some e-mail communications con- 
cerning the incident between the employee 


and the union representative. 


The IRB did not have a formal policy on the 
use of electronic networks at the time of 

this incident. In the absence of a policy, it is 
guided by Treasury Board policies dealing 
with employees’ expectation of privacy and 
the statement of authorized uses. The IRB 
stated that it supports the principle that access 
to an employee’s e-mail without consent is 
justified only in extreme situations, for example 
in situations involving a criminal or security 
infraction, and only after proper authorization 


from senior Management. 


However, in the case in question, prior to 
conducting the search of the electronic 
system, the IRB was already well aware of the 
employee's actions and her contact with the 
union representative. Its decision to retrieve 
their e-mail messages was not based on any 
concern that they were improperly using the 
system. Rather, the primary purpose was to 


conduct an internal disciplinary inquiry. 


My view was that it was unnecessary for the 


IRB to retrieve the e-mail exchanges to 
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determine if disciplinary action against the 
employee was warranted and therefore its 
actions could not be justified under the 
Privacy Act. | recommended that the IRB 
proceed quickly to complete its disciplinary 
review and that it publish a policy, similar 
to Treasury Board's, governing the use of its 


electronic networks. 


In another case, a Human Resources Develop- 
ment Canada (HRDC) employee complained 
that her supervisor retrieved personal e-mails 
she sent from her home to a co-worker and 
improperly used them in the course of an 
internal investigation into allegations that had 


been made against her by her union local. 


I established that HRDC’s local management 
was investigating an allegation that the 
employee interfered with a grievance process. 
During the investigation HRDC searched its 
Internet network database for any e-mail 
exchanges she might have had with a particu- 
lar co-worker about the grievance. HRDC 
made no effort to obtain the consent of either 
individual before searching the co-worker’s 
office e-mail account. One personal message 
from the complainant to the co-worker 
contained a reference to the grievor by name 
but nothing else related to the grievance. 

The message was otherwise predominantly 
personal in nature. Yet the department subse- 


quently used it during its investigation process. 


I accept that there may be occasions that 
would justify an employer's decision to review 
an employee's Internet network account and 
then use that information in a disciplinary 
process. However, this was not such an occa- 
sion. There was no evidence to suspect that 
the co-worker was in any way implicated in 
the internal investigation that would lead 
HRDC to search her account. By collecting 
the complainant's personal e-mail exchanges 
with the co-worker without consent, and 
subsequently using it to investigate the com- 


plainant, HRDC violated her Privacy Act rights. 


Man denied access to his information 
following war crimes investigation 


A European immigrant, now a Canadian 
citizen, requested my intervention after the 
Royal Canadian Mounted Police (RCMP) 
repeatedly denied him access to its investiga- 
tion file of his involvement in Nazi activities 


in Jewish death camps during World War II. 


The man was denied entry into the United 
States in 1990 when his name appeared in a 
database containing information gathered 

by the U.S. Justice Department's Office of 
Special Investigations (OSI). The database 
contained the names of all members of a Nazi 
unit, regardless of rank, occupation or activity. 
The OSI then asked the RCMP to investigate 
the extent of the man’s involvement in the 
Nazi unit. During the investigation, carried 


out jointly by the RCMP’s War Crimes Section 
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and Justice Canada’s Crimes Against Humanity 
and War Crimes Section, the RCMP inter- 


viewed the man about the U.S. allegations. 


Over a period of several years, he attempted to 
obtain information from the RCMP about its 
investigation so that he could take appropriate 
action to clear his name, but was always 
rebuffed. The RCMP claimed it was still look- 
ing into the allegations and releasing anything 
from its files might jeopardize the integrity of 


its investigation. 


He requested a copy of the file again in 2000 
after he received correspondence from the 
Department of Justice advising him that 

its joint investigation with the RCMP was 
concluded and the file had been closed. 

The RCMP refused again, saying the file 
was exempted in its entirety under section 
22(1)(a) of the Privacy Act, and verbally told 
him that the case was still ongoing. He then 


complained to my Office. 


When a privacy officer of my Investigations 
Branch reviewed the information withheld 

by the RCMP, he noted that some of the 
information was almost 60 years old and 
therefore did not qualify for exemption under 
the provision cited by the RCMP. The RCMP 
then considered applying another exempting 
provision, section 22(1)(b), but to do so prop- 
erly, the RCMP would have to demonstrate 
the injury that would likely occur to its inves- 


tigation if the information were released. 
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Since the investigation was already concluded, 
the privacy officer questioned how disclosure 
of the information could cause injury. The 
RCMP maintained that its investigation was 
not yet finalized even though there had been 


no activity on the file since 1997. 


After the privacy officer confirmed with the 
Department of Justice’s Crimes Against 
Humanity and War Crimes Section that the 
case was closed for lack of evidence to proceed, 
the RCMP conceded and agreed to disclose 


information from its file. 


Disclosure of information during appeal 
should be limited 


Several individuals who had appealed a Human 
Resources Development Canada (HRDC) 
decision to recoup an overpayment of employ- 
ment insurance (EI) benefits, complained that 
personal information was improperly dis- 


closed during the appeal process. 


The complainants were among over 200 
individuals who received EI benefits after 
losing their employment. Because they filed 

a grievance about their termination that 
resulted in being awarded severance packages, 
HRDC commenced action to recoup the 

EI benefits the individuals received for the 
period they were covered by the severance 
package. They appealed HRDC'’s decision to 
the EI Board of Referees. 


30 


As part of the appeal process, HRDC’s local 
office sent a disclosure package to each of the 
appellants. Each package was to contain infor- 
mation related to that particular individual's 
appeal. However, one complainant’s package 
included a document that contained the 
names, addresses, phone numbers and Social 
Insurance Numbers (SINs) of 14 other 
individuals involved in the appeal. When 

he informed HRDC of the impropriety, it 
reviewed its records and established that 
only two of the appellants had received 


this document. 


HRDC immediately took steps to retrieve the 
document from both individuals and replace 
it with a properly vetted copy. It also con- 
tacted by phone or letter the others whose 
personal information had been inadvertently 


revealed and explained the error. 


After they lost their appeal, the appellants 
sought a second-level review that required 
HRDC's district office to send each appellant 
a disclosure package related to that particular 
individual. Once again, one of the com- 
plainants got the identical document he had 
received previously, disclosing personal infor- 
mation about 14 other appellants. It was 

this second disclosure that prompted the 


complaint to me. 


I was troubled that HRDC’s district office 
would disclose the same information as the 
local office, despite the admission that the 
disclosure had been made in error. Clearly, the 
document should have been properly vetted 
by the local office the first time it was sent. 
The district office compounded this error 
when it sent the same information a second 
time, which it felt was required to ensure pro- 
cedural fairness. I concluded that HRDC had 
violated the complainants’ rights under the 


Privacy Act. 


I therefore recommended that HRDC build 
in procedures that would respect procedural 
fairness throughout the various levels of the 
EI appeals process while at the same time 
recognizing its obligations under the Privacy 
Act to disclose personal information only when 


it is directly relevant to the appeal at hand. 


In another case, a woman complained that 
information she had provided to HRDC to 
support her claim for a survivor's benefit 
under the Canada Pension Plan was disclosed 
to family members of her deceased common- 
law husband. HRDC had received applica- 
tions from both the complainant and the 
deceased’s wife by marriage, and ultimately 
gave the benefit to the common-law wife. The 
legal wife filed an appeal of HRDC'’s decision 
with the Office of the Commissioner of the 
Review Tribunals (OCRT). 
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The Review Tribunal Rules of Procedure require 
HRDC to convey to the OCRT copies of any 
documents relevant to its decisions. Under the 
same Rules, the OCRT must share copies 

of these same documents with the appellant. 
Therefore, the OCRT provided copies of all 
documents it received from the deceased's 
common-law wife. These documents contained 
information the common-law wife had given 
to HRDC to demonstrate her relationship 
with the deceased and her entitlement to the 
benefit — including her SIN, her application 
for Old Age Security, a copy of a property deed 


and information about a joint bank account. 


HRDC’s disclosure to the OCRT does not 
offend the Privacy Act — it was in accordance 
with a regulation that authorized the disclo- 
sure under an Act of Parliament. Furthermore, 
the OCRT is not subject to the Privacy Act. 
Nevertheless, I was concerned that the OCRT 
obtained more information from HRDC than 
was absolutely required. Some information, 
such as the common-law wife’s SIN and 
details about her bank account, was not nec- 
essarily a factor in HRDC’s decision, and did 
not need to be shared with the OCRT for 
appeal purposes. In response to my concerns, 
HRDC agreed to review the documents it 
intends to submit to the OCRT on a case-by- 
case basis, keeping 1n mind the privacy rights 
of all individuals concerned while providing 
sufficient information to ensure a fair and 


complete hearing. 
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Canada Post changes stance on using negative 
consent to sell addresses to mass mailers 


My Office received a complaint that Canada 
Post, a Crown corporation, was improperly 
disclosing personal information collected for 
its National Change of Address (NCOA) serv- 
ice. The complainant stated that Canada Post 
was selling subscribers’ new addresses to mass 
mailers and direct-marketing companies 
unless subscribers to the service contacted the 
corporation in writing to specifically request 
that their information not be used for that 
purpose. This practice is what is known as 
“negative consent,” and it is something 
Canadians have been known to get very 


upset about. 


For this service, individuals pay a fee to 
Canada Post to have their mail forwarded 
until they have had an opportunity to 
notify others of their change of address. 

To subscribe, they sign a Change of Address 
Notification (COAN) form containing the 


following acknowledgement: 


... lunderstand the information | 
provide will be used to deliver mail to 
my new address. I also agree Canada 
Post may supply this new address to 
mailers, provided they request it and 


already have my correct name(s) and 


old address. 
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By signing this statement, individuals asked 
Canada Post to perform the specific service 
they paid for — redirecting their mail to their 
new address. But they were also agreeing to 
something that they didn’t specifically request 
— allowing Canada Post to sell their new 
address to mass mailers and direct-marketing 
companies — unless, as indicated on the 

back of the form, they wrote in and told the 


corporation not to do so within seven days. 


Many individuals may have read this section, 
without realizing that “supply” meant sell and 
that “mailers” meant ay mailers — primarily, 


companies that send junk mail. 


I informed Canada Post of my concern that 
subscribers were not aware they were consent- 
ing to the provision of their information to 
mass mailers when they signed the COAN 
form. Canada Post argued that subscribers 
provided consent when they signed the form 
and that they could notify the corporation if 
they did not want their new address provided 
to all mailers. I pointed out that, to stop 
Canada Post from selling their information to 
mass mailers, subscribers would have to read 
the fine print on the front of the form that 
referred them to further details on the reverse 
side. The reverse side stated the following: “At 
no additional cost, Canada Post will help you 
advise businesses and other organizations of 


your new permanent address.” 


I disagreed with Canada Post's stance that it 
had obtained consent. Not only is the notion 
of “negative consent” insensitive to the privacy 
rights of Canadians, but Canada Post didn't 
really obtain proper consent at all. Under the 
Privacy Act, an organization does not have 
your consent if it has not told you what you 


are consenting to. 


Informed consent was the real issue. Section 5(2) 
of the Act requires a Government institution 
to inform you of its purposes when it collects 
personal information from you. Was Canada 
Post informing those who subscribed to the 
NCOA service of its purposes, plainly and 
fully? Would reasonable persons, on reading 
the COAN form, conclude that they were giv- 
ing consent for the sale of their personal infor- 
mation to mass mailers and direct marketers? 
I was quite sure they would not. In matters 
involving consent, the reasonable expectations 


of the individual are also relevant. 


Canada Post initially agreed to adopt some 
of my recommendations to make the NCOA 
service more transparent and sensitive to 
privacy rights. It agreed to replace the word 
“acknowledgment” with “authorization” on 
the front of the COAN form and to add the 
phrase “including direct mailers” in the 
statement. But Canada Post was reluctant to 
accept my main recommendation: to give 
subscribers to the service a positive choice in 


the matter by adding an opt-in box on the 


Part ONE <~ Report ON THE Privacy ACT 


front of the form. It believed that such an 
addition risked undermining the NCOA 
service and would lead to frustration and 


inconvenience for its customers. 


I convinced Canada Post otherwise. I argued 
that Canada Post would benefit from such an 
addition, since its customers would appreciate 
that the corporation was doing everything in 
its power to maintain their privacy, and that 
customers would also benefit. Customers who 
want to receive mail from mass mailers can 
clearly indicate their choice, while those who 
don’t want the junk mail will also have a 
choice in the matter. But the customer would 


have the choice, not Canada Post. 


Canada Post finally agreed to add an opt-in 
box on its COAN form. 


INCIDENTS UNDER THE 
Privacy Act 


The Investigations Branch staff makes 
inquiries about incidents that have come to 
my attention from various sources, but are not 
considered to be formal complaints under the 
Privacy Act. Many of these incidents concern 
the management (or mismanagement) of 
personal information — inadvertent disclosures 
to third parties, or lost or stolen files and 


electronic notebooks. Some examples follow. 
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Improper disclosure of SIN on Canada Child 
Tax Benefit forms 


In one case, a newspaper reported that the 
Canada Customs and Revenue Agency 
(CCRA) had accidentally released informa- 
tion about individuals in western Canada in 
receipt of a Canada Child Tax Benefit 
(CCTB). When we looked into the matter, we 
learned that some taxpayers received page one 
and two of their own Notice of Determination 
form and page three containing information 
about another taxpayer. The information on 
page three displayed the taxpayer’s Social 
Insurance Number (SIN), first name of the 
spouse where applicable, and the payment 


schedule for the year. 


Even though the taxpayer's name is not 
displayed, the Social Insurance Number is a 
unique number assigned to that taxpayer and 
therefore constitutes personal information as 
defined by the Privacy Act. Fortunately, and 
contrary to the media report, the information 
did not include the other taxpayer's surname, 
home address, children’s names or their dates 
of birth, or family income. Nevertheless, 
weve all heard stories about the results of 
SINs getting into the wrong hands and the 


havoc that this can wreak on a person’ life. 
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CCRA also conducted its own investigation 
and determined that the problem was the 
result of a printing synchronization error, 
probably because of a computer glitch. To pre- 
vent a similar problem from occurring in the 
future, CCRA has enhanced its systems to 
detect any malfunction of the printer’s sorting 
function and shut it down. Operator inter- 
vention will be required to continue the print 
job after appropriate inspection has been 
carried out. As a result of this incident, 
CCRA has decided that it is no longer neces- 
sary to print the Social Insurance Number on 
the second and any subsequent pages of the 


CCTB Notice of Determination form. 


Gun registry documents found in dumpster 


Several days before Christmas, a man called 
my Office to report that he had found three 
bags containing personal information belong- 
ing to the Canadian Firearms Program in a 
dumpster in a locked compound owned by 


the private company where he worked. 


My investigators went to the scene immedi- 
ately. The location was not anywhere near the 
Canadian Firearms Program processing site, 
and the dumpster was strictly used for wood 
products. My investigators retrieved a number 
of envelopes addressed to the Canadian 
Firearms Program, most of which contained 


names and return addresses of individuals. 


My investigators then confirmed that, during 
the fall, the Canadian Firearms Program 

had sent packages containing personalized 
applications to all firearms owners, along 

with return envelopes pre-addressed to the 
Canadian Firearms Program. The information 
they found in the dumpster contained the 
pre-addressed envelopes that had been 


returned to the Canadian Firearms Program. 


Having established that the information 
originated from the Canadian Firearms 
Program, my investigators tried to determine 
how it had ended up in the compound of a 
private company. They confirmed that the 
dumpster was rented by a waste management 
company and had been in the compound 


since early December. 


My investigators observed that the bags found 
in the dumpster were covered in snow and 
were stuck to the bottom of the dumpster. 

It is likely that when the waste company 
retrieved the dumpster from a previous loca- 


tion and emptied it, the bags stayed within. 


My officials contacted the Department of 
Justice, the Government institution responsible 
for the gun registration program. Officials 
stated that the department had contracted out 
the processing of the registration forms to a 
private company. The company is fully cog- 
nizant of the provisions of the Privacy Act and 


thought it had taken every precaution to safe- 
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euard individuals’ privacy rights. However, 
company officials confirmed that the normal 
practice was to throw out the pre-addressed 
return envelopes using a regular garbage can, 
without realizing that firearms owners had 
written their names and return addresses on 
the envelopes, which would make them easily 
identifiable as firearms owners. The company 
agreed to immediately stop throwing the 
envelopes into the regular garbage and under- 
took to dispose of them in a secure manner, 


through shredding. 


HRDC/CCRA to share data on eligibility for 
Guaranteed Income Supplement 


I took a special interest in another situation 
that received a great deal of media attention — 
the apparent inability of the Canada Customs 
and Revenue Agency (CCRA) to share infor- 
mation with Human Resources Development 
Canada (HRDC) that would identify senior 
citizens who are eligible to receive the 
Guaranteed Income Supplement (GIS). The 
GIS is a component of the Old Age Security 
(OAS) benefit and is granted to those seniors 
in the lower income bracket. Approximately 
1.5 million seniors receive the GIS. Although 
this case did not directly involve the Privacy 
Act, | did not want privacy legislation or my 
Office to be seen as a barrier preventing fed- 
eral Government departments from engaging 


in activities that benefit Canadians. 
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CCRA has taxpayer information that would 
reveal which seniors would qualify to receive 
the supplement, but it refused to share 

their identities with HRDC’s Income Security 
Programs Branch that grants the benefit 
because of the confidentiality provisions of the 
Income Tax Act. In my view, the Income Tax 
Act contains specific authorization to disclose 
personal information for the purpose of 
administering the Old Age Security Act, as 

I testified before a House of Commons 


committee on the matter. 


Pollowing media reports about the lack of 
cooperation between the two arms of 
Government, my Office met with officials of 
HRDC and CCRA to facilitate a solution to 
the problem, and to help ensure that seniors 
who qualify for the GIS are made aware of the 
availability of the income supplement. As a 


result of these efforts: 


m CCRA added a page for lower income sen- 
lors to its 2001 tax guide with key mes- 


sages about the GIS and how to apply; 


= CCRA will send information about OAS 
and GIS benefits to people over age 65 


who have a low or modest income; and 
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w HRDC will receive from CCRA a list of 
low-income seniors who receive the OAS 
benefit but not the GIS. Using income 
data supplied by CCRA and existing per- 
sonal data from the OAS application form, 
HRDC will provide potential GIS clients 
with a simplified GIS application form 
containing their pre-printed name, address 
and income information. It will ask them 
to confirm or correct the information on 
the form so that their eligibility for GIS 
benefits can be decided upon return of the 
form to HRDC. 


I understand that both HRDC and CCRA 
recognize the need for a more streamlined 
process that ensures the legal underpinnings 
are in place to make seniors aware of their enti- 
tlement to benefits. My staff and I are avail- 
able to both departments to discuss other 
initiatives and to provide whatever assistance 
we can to ensure that there are no adverse 


implications from a privacy perspective. 


Pus.tic INTEREST DISCLOSURES 


Paragraph 8(2)(m) of the Privacy Act allows 
the head of a Government institution to 
disclose personal information in the public 
interest, without the individual’s express 
consent — either because disclosure clearly 


outweighs any consequential invasion of 


privacy that might result, or because it would 
benefit the individual to whom the informa- 
tion relates. This provision is designed to deal 
with those situations where the Government 
institution cannot satisfy any other provision 
set out in subsection 8(2) of the Act to justify 
the disclosure. Subsection 8(5) of the Act 
imposes a mandatory duty on the heads of 
Government institutions to notify the Privacy 
Commissioner in writing of any public interest 
disclosure of personal information. The notice 
is to be issued in advance unless the situation 
requiring disclosure is so urgent and pressing 
that failure to act immediately would itself 


contribute to some identifiable harm. 


This past year, | reviewed 57 notifications 
that personal information would be disclosed 
in the public interest. Almost one half of 
these were generated by Correctional Service 
Canada (CSC). CSC receives requests from 
third parties, including victims groups, for 
Board of Inquiry reports dealing with issues 
that have often received wide media attention, 
including prison escapes and violent criminal 
activities of offenders still under CSC supervi- 
sion. It also receives requests for information 
from family members of offenders who died 
while under CSC supervision. The public 
interest disclosure provision of the Privacy Act 
is CSC’s only authority to release personal 


information to the family on compassionate 
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grounds, so that the family can have a better 
understanding of what happened and to help 


them achieve some degree of closure. 


I also reviewed the circumstances related 

to a notification to me from the RCMP that it 
intended to release personal information 
about a convicted criminal to the media. The 
information requested by the media related 
to a videotape that had been entered into evi- 
dence in the offender’s trial, which the media 
had wanted to use in an exposé about the 
criminal’s highly publicized case. The media 
had turned to the RCMP for assistance after 
discovering that the Court had destroyed its 
copy of the tape — the Court does not retain 
indefinitely all evidence or exhibits presented 
during proceedings. The only existing copy 
was in the possession of the RCMP. 


I failed to see how the public interest would 
be served by disclosing the information under 
these circumstances and asked the RCMP to 
reconsider its position. Although the tape 
was used as evidence in a criminal proceeding, 
which is public in nature, it is first and 
foremost personal information about an 
identifiable individual contained in the 
RCMP’s investigative records, which are not 
generally publicly available. I therefore 
recommended to the RCMP that it refuse to 


disclose the tape. The RCMP complied with 


my recommendation. 
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Top Ten Departments by Complaints Received 
April 1, 2001 to March 31, 2002 


Access to 

Personal 
Organization Total = Information Time Privacy Other 
Canada Customs and Revenue Agency 307 a 85 69 1 
Correctional Service Canada 265 84 125 56 0 
Human Resources Development Canada NLT, 42 D7 18 0 
Citizenship and Immigration Canada 103 57 40 6 0 
Royal Canadian Mounted Police 89 65 16 8 0 
National Defence 78 oA eB) 1] 1 
Immigration and Refugee Board of Canada 4] 6 29) 6 0 
Canada Post Corporation oy) 2 6 14 0 
Justice Canada 22 6 5 11 0 
Canadian Security Intelligence Service 18 18 0 0 0 
Others 141 67 30 44 0 
Total 1,213 540 428 243 2 
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Completed Investigations and Results by Department 
April 1, 2001 to March 31, 2002 


Well- Well-founded/ 


Organization founded 


Agriculture and 


Not 


Resolved Well-founded Discontinued Resolved Settled Total 


Agri-Food Canada 0 0 1 1 0 0 2 
Atlantic Canada 

Opportunities Agency 0 0 0 0 0 2 Z 
Bank of Canada 0 0 0 0 0 %, 3 
Canada Customs and 

Revenue Agency 44 20 120 8 10 630-1265 
Canada Mortgage and 

Housing Corporation 1 0 0 0 0 0 i! 
Canada Post Corporation 3) i 10 2 2 16 42 
Canadian Environmental 

Assessment Agency 0 0 Z 0 0 0 2 
Canadian Grain Commission 0 1 0 0 0 2 3 
Canadian Heritage 0 0 1 0 0 1 2 
Canadian Human 

Rights Commission 0 0 2, 0 0 i 3 
Canadian Museum of 

Civilization Corporation 1 0 0 0 0 0 l 
Canadian Nuclear 

Safety Commission 0 ) 0 0 0 3 3 
Canadian Radio-Television 

and Telecommunications 

Commission 0 0 1 0 0 1 2 
Canadian Security 

Intelligence Service 0 0 2) 1 0 1 Si 
Canadian Space Agency 3 1 1 1 0 0 6 
Citizenship and 

Immigration Canada 40 4 26 i 0 iM 98 
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Completed Investigations and Results by Department (Continued) 
April 1, 2001 to March 31, 2002 


Well- Well-founded/ Not 
Organization founded Resolved Well-founded Discontinued Resolved Settled Total 
Commission for Public 
Complaints against the RCMP l 2 4 0 0 1 8 
Correctional Investigator 
Canada 1 0 0 0 0 0 1 
Correctional Service 
Canada 344 tl 47 17 1 89) a) 
Environment Canada 2 0 l 0 0 1 4 
Farm Credit Canada 0 3 1 0 0 l 5 
Fisheries and Oceans Canada 0 0 1 0 0 0 1 
Foreign Affairs and 
International Trade Canada 24 0 4 0 0 l 29 
Health Canada 0 0 0 2 0 4 6 
Human Resources 
Development Canada 86 10 45 24 2 369203 
Immigration and 
Refugee Board 29 it & 0 0 6 39 
Indian and Northern 
Affairs Canada l 1 9 1 l 0 3 
Industry Canada 1 0 4 1 1 Z 1] 
Justice Canada 8 1 12 4 1 8 34 
National Archives of Canada 1 0 3 1 0 = 10 
National Defence 44 14 20 8 3 o5 114 
National Gallery of Canada 0 - 0 0 0 0 1 1 
National Parole Board 0 3 9 3 0 5 20 
Natural Resources Canada 0 0 ft 0 0 1 2 
Office of the Chief 
Electoral Officer 0 l 1 0 1 2 5 


40 


Part ONE ~~ Report ON THE Privacy ACT 


Completed Investigations and Results by Department (Continued) 
April 1, 2001 to March 31, 2002 


Well- Well-founded/ Not 

Organization founded Resolved Well-founded Discontinued Resolved Settled Total 
a en 
Office of the Commissioner 

of Official Languages 0 0 0 1 0 0 1 
Office of the Superintendent 

of Financial Institutions 0 0 1 0 0 0 l 
Ombudsman National 

Defence and Canadian Forces 1 0 1 0 0 0 2 
Privy Council Office 3 1 0 0 0 0 4 
Public Service Commission 

of Canada 1 2 0 0 0 2 S 
Public Service Staff 

Relations Board 0 0 1 0 0 0 1 
Public Works and Government 

Services Canada 1 0 1 2 0 6 10 
Royal Canadian 

Mounted Police 20 6 66 10 3 36 141 
Solicitor General Canada 2 0 2 0 0 0 4 
Statistics Canada 3 0 2 0 0 0 5 
Status of Women Canada 0 0 I 0 0 0 Ds 
Toronto Port Authority 1 0 0 0 0 0 1 
Transport Canada 0 2 l 0 0 0 3 
Treasury Board of 

Canada Secretariat 0 0 3 0 0 0 3 
Veterans Affairs Canada 0 0 l l l l 4 
Western Economic 

Diversification Canada 0 0 0 0 0 l l 
tees 
Total 668 91 445 99 26 344 1,673 
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Completed Investigations by Grounds and Results 


April 1, 2001 to March 31, 2002 


Well- Well-founded/ Not 

founded Resolved Well-founded Discontinued Resolved Settled Total 

Access to 
Personal Information 22 80 260 60 22 259 EOS 
Access 22 77 249 a) 22 248) e967) 
Correction/Notation 0 ) 9) 4 0 4 20 
Language 0 0 1 2) 0 + 8 
Inappropriate Fees 0 0 1 0 0 o) 4 
Privacy 184 11 oy) 26 4 Vise ak 
Collection 10 2 26 y) 0 Py 59 
Retention and Disposal 10 2 > 1 1 i, 26 
Use and Disclosure 164 7 68 23 5 ev evmye ey 
Time Limits 462 0 85 13 0 Ti gegeoyal 
Correction/Time 4 0 0 ] 0 ] 6 
Time Limits 440 0 5) 9 0 Dime lol 
Extension Notice 18 0 on 3 0 1 54 
Other 0 0 1 0 0 1 2 
Total 668 whl 445 99 26 344 1,673 
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Origin of Completed Investigations 
April 1, 2001 to March 31, 2002 


Province/ Territory Number 
Newfoundland 5! 
Prince Edward Island 4 
Nova Scotia a7, 
New Brunswick 60 
Quebec Zoi), 
National Capital Region—Quebec 1 
National Capital Region—Ontario 116 
Ontario 433 
Manitoba 92 
Saskatchewan ao) 
Alberta 2/1 
British Columbia 315 
Nunavut 0 
Northwest Territories 0 
Yukon 5 
International 10 
Total 15673 
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Privacy PRACTICES AND REVIEWS 


Introduction 


Section 37 of the Privacy Act permits me to 
initiate compliance reviews, at random, of the 
personal information-handling practices of 
federal institutions. What this means is that 

I audit them, to verify whether they are com- 
plying with the principles for the collection, 
use, disclosure, protection, retention and 
disposal of personal information set out in 


sections 4 to 8 of the Act. 


The Office has been conducting compliance 
reviews under section 37 since 1984. I have 
expanded this function during the past year, 
setting up a Privacy Practices and Reviews 
Branch, to allow me to assess how well 
organizations are complying with the require- 
ments set out in the Privacy Act and the 
Personal Information Protection and Electronic 
Documents Act. (The private sector legislation 
gives me similar powers of audit; my discussion 
of private sector audit activity is in Part Two 


of this Report.) 


As an ombudsman, I want privacy audits to 
be non-confrontational whenever possible. An 
audit, ideally, is a co-operative, constructive 
approach to dealing with issues before they 
become complaints. It’s useful for organiza- 
tions that want to improve their personal 
information-handling practices. Although I 
have the same powers with respect to audits 


that I do in investigations — to summon 
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witnesses, administer oaths, and compel 
organizations to produce evidence — I would 
only resort to them if I didn’t get voluntary 


co-operation. 


My staff in the Privacy Practices and Reviews 
Branch, in addition to auditing and reviewing, 
works with federal organizations that are look- 
ing for a better understanding of compliance 
issues and the privacy implications of programs 
and practices. It’s critical for Government 
departments to fully explore how privacy can 
be protected before they go ahead with plans, 
however well intentioned, to cut costs or 
protect citizens. On request, my branch staff 
reviews new proposals for information 
management, such as data-matching initiatives, 
the creation of databases and information- 
sharing arrangements with other organizations. 
This is another way to help ensure that 


Canadians’ privacy rights are respected. 


In the past year, my Office completed reviews 
of the personal information-handling practices 
under section 37 of the Privacy Act at the 


Canadian Nuclear Safety Commission 
(CNSC) and the Immigration and Refugee 
Board (IRB). 


The objectives of the reviews were: to learn 
where and how the CNSC and the IRB han- 
dle personal information; to determine the 
degree to which their personal information 
management policies and practices are in 


compliance with sections 4 to 8 of the Privacy 


Act in terms of the principles of fair informa- 
tion practices; and to offer observations and 
recommendations, where necessary. At the end 
of each review, organizations received reports 
complete with detailed findings and recom- 
mendations. I have recently issued the reports 
of our compliance reviews to the CNSC and 
the IRB, and I am awaiting their responses to 


the findings and recommendations. 


It is not my intention to routinely disclose 
review findings unless the issues uncovered 
are so outstanding as to warrant public 
disclosure. An outstanding issue presented 


itself in the review of the IRB. 


The review revealed that the Montreal, 
Vancouver and Toronto regional offices use 
closed circuit television equipment to monitor 
public reception and waiting rooms, as well 
as in hallways adjacent to hearing rooms. In 
some cases, video and audio equipment was 
installed inside hearing rooms. At the time of 
the compliance review, IRB did not have 
internal written policies or procedures regard- 
ing the use of electronic surveillance equip- 
ment, and no signage existed to inform 
individuals that they may be under surveil- 


lance in the areas where such devices are used. 


My Office was particularly concerned about 
the existence of secret microphones in hearing 
rooms at the Montreal regional office of 


which headquarters were unaware. The 
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conduct of covert surveillance — whether it 
involves the use of video surveillance equip- 
ment or other recording devices — is a major 
infringement of an individual's right to privacy 
and must be properly justified. No reasonable 
justification was provided concerning the 
installation of such equipment. IRB officials 
have since confirmed that the microphones in 
question have been dismantled and they assert 
that the listening devices were never used. My 
Office was also informed that the unions have 
been advised of the matter and that the IRB 
has developed a security policy requiring all 
regions to submit their security plans to head- 


quarters for approval before implementation. 


Update on Canadian Firearms Program 


Since the mid-1990s my Office has taken a 
keen interest in the Canadian Firearms 
Program. The Firearms Act is a highly contro- 
versial piece of legislation that continues to 
produce strong emotions among both its sup- 
porters and its critics. My continued interest 
in the implementation of this legislation is 
simple: the Firearms Program involves the 
collection and use of a large amount of highly 
sensitive personal information. This legisla- 
tion also has a direct impact on more than 
2.3 million firearm owners, involving more 
than 7 million firearms in Canada. I also 
continue to receive complaints and inquiries 
about various aspects of the program, including 


some from Members of Parliament. 
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On August 29, 2001, I issued my report 
entitled Review of the Personal Information 
Handling Practices of the Canadian Firearms 
Program to the Department of Justice and the 
RCMP. Part 1 of the report summarized my 
Office’s review of the program’s compliance 
with sections 4 to 8 of the Privacy Act dealing 
with the handling of personal information. 
Part 2 contained our assessment of the perti- 
nence of questions about personal history 
used on the firearms licence applications and 
their compliance with the Privacy Act. The 
report contained some 34 detailed recom- 
mendations for corrective measures aimed at 


reducing the intrusiveness of the program. 


None of my recommendations to the 
Department of Justice has yet been accepted. 
The RCMP, however, has agreed to imple- 
ment some of the recommendations from my 
report. I am pleased to note, for instance, that 
firearms officers across Canada no longer have 
full query access privileges to the RCMP’s 
Police Information Retrieval System (PIRS) 
and that all of my recommendations with 
respect to limiting the use of PIRS have been 
implemented. In addition, I expect that the 
RCMP will complete the necessary revisions 
to the Memoranda of Understanding regard- 


ing four informatics and security areas related 
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to the Firearms Program in the near future. 
These important steps will help to tighten up 
the control of access to sensitive personal 


information used in the program. 


While I do not have the power under the 
Privacy Act to force the department to 
implement my recommendations, I will 
continue my efforts to urge the department 
to take appropriate measures to bring the 
Canadian Firearms Program into full com- 


pliance with the Acz. 


Subsequent to the research and fieldwork that 
formed the basis of my original report, other 
issues came to light. My Office has been 


monitoring the following outstanding issues: 


w Outsourcing — Implementation of the 
existing contractual arrangement with 
BDP Business Data Services Ltd., all 
aspects of the Alternative Service Delivery 
initiative, as well as the current practice of 
outsourcing secondary and tertiary screen- 


ing functions; and 


m Any international information-sharing 
arrangements relating to the Canadian 
Firearms Program, whether directly or indi- 


rectly through other enforcement agencies. 


Update on HRDC Governance protocol 
for the Databank Review Committee 


In last year’s Annual Report, I described 

how, under mounting public pressure, 
Human Resources Development Canada 
(HRDC) made the decision to dismantle the 
Longitudinal Labour Force File and imple- 
ment a review process and a governance 
protocol for all policy analysis, research and 
evaluation activities involving the connection 
of separate databanks. As I explained then, 
this review process would involve consultation 


with my Office to examine such projects. 


Since the last reporting period, my Office 

has provided comments on an additional 

17 HRDC submissions, including the Review 
of the Action Centre for Employment, the 
Non-Experimental Evaluation of Investigation 
and Control, and the Testing of Probabilistic 
Record Linkage projects, to name a few. 

I thought it appropriate to discuss some 
examples of the work that we have done over 
the course of the year in terms of reviewing 
and providing comments in relation to 


these submissions. 


My Office developed a customized assessment 
tool to provide a timely review of the HRDC 
submissions. The tool is intended to ensure 
that the review of such projects is consistently 
thorough and that all the principles of fair 


information practices in the Privacy Act are 
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respected in the submissions. Although we are 
still testing its efficacy, my Office has had 


positive results using the tool to date. 


By reviewing the development of HRDC’s 
research projects, my Office's involvement 
serves as a critical check to protect privacy and 
often raises broader questions in relation to 
the use of personal information for purposes 


related to research and evaluation. 


For instance, the Non-Experimental 
Evaluation of Investigation and Control 
(I&C) program sought to identify savings and 
determine the extent of deterrence resulting 
from I&C activities as a way of evaluating the 
short-term impact of the I&C function and 
better managing the branch. To accomplish 
this, HRDC research officers linked EI claim 
data with I&C case files and, using specific 
statistical methods, estimated the likelihood 
of EI fraud based on basic characteristics such 
as demographics, industry and other variables. 
Based on this analysis, HRDC researchers 
produced an equation that could be used to 
estimate the likelihood of EI fraud for other 
EI claims and therefore to evaluate the effec- 


tiveness of I&¢C interventions. 


Although the objectives of the evaluation 
project were detailed and HRDC had the 
authority to evaluate the program, the sub- 
mission was unclear with respect to the 
subsequent use of this equation following 


completion of the evaluation project. My 
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Office was concerned that, although it was 
created in the context of research, HRDC 
could eventually use such an equation to 
make decisions directly affecting individuals, 
such as by systematically profiling all EI claims 
for potential investigations solely based on the 
results of the equation. Since access to the 
personal information was strictly for research 
and evaluation purposes, my Office was of 
the view that I&C could not use the equation 
for administrative or enforcement purposes 


directly affecting a particular individual. 


My Office clarified this issue with HRDC, 
which confirmed that it never intended to use 
the equation for operational purposes and, 
specifically, that it would not use the method 
to profile individuals for investigation. HRDC 
effectively established a clear separation 
between its research work and its enforcement 
branch. Although it is clear that HRDC had 
implemented the appropriate practices in 
relation to this project, the example serves to 
illustrate that use of personal information for 
“research or evaluation purposes” can have 


potential pitfalls if left unchecked. 


It is worth noting that my Office has noticed 
a marked improvement in the level of detail 
and completeness of HRDC’s project submis- 
sions in terms of addressing privacy concerns. 
Nevertheless, there is always room for 
improvement when it comes to privacy. In 
reviewing some of the HRDC submissions 


a common deficiency was noted: since many 
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of the proposals are not yet finalized, they 
only provide limited information in relation 


to contracts involving outside parties. 


Although HRDC has provided some exam- 
ples of proposed contractual language, there is 
often little or no reference to the Privacy Act. 
My Office has insisted on the importance of 
protecting privacy in contractual agreements 
with consultants and third parties. We have 
clearly stipulated that all such contractual 
agreements must state that all personal infor- 
mation involved in the research is deemed to 
be under the control of HRDC; that such 
information is subject to the provisions of the 
Privacy Act; and that consultants and third 
parties must explicitly undertake to comply 


with all of the requirements of the Act. 


The significance of this clause is two-fold. 
First, it holds the consultant accountable to 
the same standards of information manage- 
ment that are in place across Government 
and, second, it ensures that the provisions 
related to the conduct of reviews and investi- 
gations contained in the Privacy Act are 
applicable and enforceable. Although we have 
every confidence that HRDC is integrating 
these clauses in its contracts, it is important to 
remember that part of my role is to conduct 
reviews to determine whether the actual 
privacy practices of a Government organiza- 
tion are consistent with the fair information 


principles under the Privacy Act. 


IN THE CouRTS 


Introduction 


Section 41 of the Privacy Act allows an indi- 
vidual, following my investigation, to apply 
to the Federal Court of Canada for review of 
a Government institution's decision to refuse 
the individual access to his or her personal 
information. From the time the Privacy Act 
came into force in 1983, 118 applications for 
review have been filed in the Federal Court. 
Twelve of these were filed in the year ending 
March 31, 2002. 


Section 42 of the Privacy Act allows me to 
appear in Federal Court. I can apply to the 
Federal Court for review of a Government 
institution's decision to refuse access to per- 
sonal information if I have the consent of the 
individual who requested the information; 
appear before the Court on behalf of an 
individual who has applied for review under 
section 41; or, with leave of the Court, appear 
as a party to any review applied for under 


section 41. 


The following is not an exhaustive list of all 
Privacy Act applications in the courts but 
rather a summary of matters in which I am 


actively involved: 


Part ONE <~ ReEporT ON THE Privacy ACT 


Traveller Declaration Forms (Form E-311) 


We pursued two cases based on the disclosure 
of personal information by Canada Customs 
and Revenue Agency (CCRA) to the Canada 
Employment Insurance Commission (CEIC) 
for use in an investigative data match program 
to determine if persons were fraudulently 
receiving Employment Insurance benefits 
while outside of Canada. The personal infor- 
mation in question was taken from Traveller 
Declaration Forms (E-311 forms) presented to 
Customs by Canadian residents returning to 


Canada between 1994 and 1996. 


= Privacy Commissioner v. Attorney General 
of Canada 
The Federal Court of Appeal found that 
the disclosure of personal information from 
the E-311 forms was authorized by section 
8(2)(b) of the Privacy Act and section 108 
of the Customs Act, which gave the Minister 
of National Revenue discretion to disclose 
information collected by the department. 
In this case, the Court found the disclosure 
of information by the CCRA to the CEIC 
pursuant to an MOU governing terms and 
conditions of disclosure to be authorized. 
(Section 108 of the Customs Act has now 
been amended under Bill S-23.) 
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ma The Charter Challenge 
The Federal Court of Appeal found there 
to be no reasonable expectation of privacy 
sufficient to engage section 8 of the 
Canadian Charter of Rights and Freedoms in 
the information contained in E-311 forms. 
This conclusion was based on two elements: 
the limited nature of the information in 
question, which did not reveal intimate 
details of the lifestyle and personal choices 
of the individual, and the narrow enforce- 


ment use to which the information was put. 


Status 

The cases were heard on November 7, 2001. 
The Supreme Court of Canada released its 
decisions in both cases on December 7, 2001. 
In each case, the reasoning of the Federal 
Court of Appeal was affirmed. In the Charter 
Challenge, the Supreme Court specifically 
concluded that there was no reasonable 
expectation of privacy in relation to the 
disclosed portion of the E-311 information 
which outweighed the CEIC’s interest in 
ensuring compliance with the self-reporting 
obligations of the Unemployment Insurance 


benefit program. 
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Information Commissioner of Canada 
v. Commissioner of the RCMP and 
Privacy Commissioner 


A list of the career postings of four named 
Royal Canadian Mounted Police (RCMP) 
officers was requested under the Access to 
Information Act. The Commissioner of the 
RCMP refused to release the information on 
grounds that it revealed employment history 
and thus was personal information as defined 


in section 3 of the Privacy Act. 


At issue was whether the information could be 
disclosed under paragraph (j) of the definition 
of personal information in the Privacy Act, 
which states that information relating to the 
position or functions of Government officers 
or employees is not personal information. 

The larger question was the appropriate bal- 
ance between the provisions of the Access to 
Information Act and those of the Privacy Act. 
The Federal Court of Appeal held that the 
information was personal information and did 
not fall under the paragraph (j) exception. 
The Court found that the exception should 
be construed in a way that does not allow 

for the disclosure of an individual’s employ- 


ment history. 


Status 

The Information Commissioner obtained 
leave to appeal this decision to the Supreme 
Court of Canada. I was granted leave to inter- 
vene in the appeal on January 7, 2002. The 
case was heard on October 29, 2002, after 


which the Court reserved its decision. 


Clayton Charles Ruby v. Solicitor General 


The Canadian Security Intelligence Service 

(CSIS) refused Mr. Ruby’s request for access 
to his personal information. Mr. Ruby filed 

for a court review under section 41 of the 


Privacy Act. 


During the court review, Mr. Ruby raised 
Charter concerns regarding the constitution- 
ality of section 51 of the Privacy Act. This 
section provides for closed hearings (in camera) 
or hearings that exclude one party to the 
conflict (ex parte), where a Government insti- 
tution has claimed the “foreign confidences” 
or the “national security” exemptions under 
the Act. The Federal Court of Appeal decided 
that these provisions (sections 51(2)(a) and 
51(3) of the Privacy Act respectively) 
infringed on the freedom of the press, which 
is protected by section 2(b) of the Charter, 
but those provisions were justified under 
section 1 of the Charter. The provisions were 
found not to violate the right to life, liberty 
and security of the person protected by 


section 7 of the Charter. 
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Status 

Mr. Ruby was granted leave to appeal to 

the Supreme Court of Canada concerning the 
Charter issue on January 18, 2001. The 
Solicitor General was granted leave to cross- 
appeal, and I was granted leave to intervene, 
on an issue concerning the interpretation of 
section 22(1)(b) of the Privacy Act. The case 
was heard by the Supreme Court of Canada 
on April 24, 2002 and the decision was 
rendered on November 21, 2002. 


The Supreme Court held that the section 51 
procedures in the Privacy Act do not fall below 
the level of fairness required by section 7 of 
the Charter. The Court did not find it neces- 
sary to the disposition of the case to decide 
on the privacy arguments raised by Mr. Ruby 
under section 7. Therefore, from a privacy 
perspective, the ruling does not affect the 
status quo. The mandatory i camera provision 
in section 51 does, however, contravene sec- 
tion 2(b) of the Charter. The Supreme Court 
further found that the provision could not be 
justified under section 1 of the Charter. The 
provision 1s unconstitutional and must be 
“tread down” to apply only to those parts 

of the hearing that involve the merits of an 
exemption. The Supreme Court noted that 
the past judicial practice under section 51 was 
in fact to conduct the hearing in open court 
and to hear only the merits of the exemptions 


in camera. 
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With respect to the cross-appeal, the Supreme 
Court confirmed the finding it made in 
Robert Lavigne v. Office of the Commissioner 
of Official Languages on the interpretation of 
section 22(1)(b) of the Privacy Act (as follows). 


Robert Lavigne v. Office of the Commissioner 
of Official Languages 


Mr. Lavigne was refused access to information 
about himself contained in witness statements 
made in the course of an investigation con- 
ducted by the Office of the Commissioner of 
Official Languages. The office based its 
refusal of access on the exemption contained 
in section 22(1)(b) of the Privacy Act. 


The Federal Court of Appeal held that section 
22(1)(b) can only be invoked where there is 
evidence of injury to a specific investigation; 
that it cannot be invoked once the specific 
investigation has been completed; and that 
the allegation of a “chilling effect” on future 
investigations is not sufficient to support 


refusal to disclose. 


Status 

The Commissioner of Official Languages was 
granted leave to appeal to the Supreme Court 
of Canada on April 19, 2001. I was granted 
leave to intervene in support of Mr. Lavigne. 
The case was heard by the Supreme Court of 
Canada on January 17, 2002 and its decision 
was released on June 20, 2002. 
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The Supreme Court concluded that the 
exemption in section 22(1)(b) was not limited 
to current investigations. However, where an 
institution wishes to rely on the exemption in 
respect of harm to future investigations, it 
must be able to demonstrate a clear and direct 
connection between the disclosure of the 


information and the injury that is alleged. 


The Supreme Court found that the Office 
of the Commissioner of Official Languages 
had not satisfied this test and ordered that 
Mr. Lavigne be given access to his personal 


information. 


Information Commissioner of Canada 
v. Minister of Citizenship and 
Immigration Canada and Philip W. Pirie 


Mr. Pirie was refused access to the identities 
of employees who gave views or opinions 
about him during an administrative review 
conducted by Citizenship and Immigration 
Canada. The information was withheld as 
the personal information of those employees 
under section 19(1) of the Access to 


Information Act. 


The Federal Court Trial Division concluded 
that the identity of the individuals who 
expressed views about Mr. Pirie was their 


own personal information and should not 


be disclosed to Mr. Pirie. 


Status 

The Information Commissioner filed an appeal 
arguing that the identities of individuals 

who commented about Mr. Pirie during the 
review process are the personal information of 
Mr. Pirie under paragraph (g) of the definition 
of personal information in the Privacy Act. 

I was granted leave to intervene at the Federal 
Court of Appeal in support of the Information 
Commissioner's position. The matter was 
heard on June 4, 2002 and the Court's deci- 


sion was released on June 21, 2002. 


The Federal Court of Appeal agreed with the 
Information Commissioner and me that the 
identities of the persons interviewed should 
be disclosed to Mr. Pirie. The Court observed 
that the names of the interviewees were per- 
sonal to both Mr. Pirie and to the interviewees, 
but that one interest must prevail over the 
other. The Court looked at the private and 
public interests at stake, and concluded that 
both mandated the disclosure of the names to 
Mr. Pirie. This decision is not being appealed 


to the Supreme Court. 
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Mertie Anne Beatty et al. v. the 
Chief Statistician et al. 


This is a recent application brought by a 
eroup of Canadian citizens who seek access to 
the 1906 census returns for the provinces of 
Manitoba, Saskatchewan and Alberta. The 
applicants seek an order compelling the 

Chief Statistician to transfer the 1906 census 
returns to the National Archivist, and an order 
directing the National Archivist to make the 
returns available to the public for research 
purposes in accordance with section 6 of the 


Privacy Regulations. 


Status 

The application was filed on February 5, 2002, 
and I was one of the named respondents. All 
arguments have now been filed. A hearing 


date has not been set. 
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INTRODUCTION 


YEAR IS NOT LONG IN THE LIFE 
of a law — not long enough, 
perhaps, to afford a 

basis at present for a comprehensive 
analysis of the application of the 
Personal Information Protection and 
Electronic Documents (PIPED) Act. 
Still, from the 28 investigations 
we finalized under the PIPED Act 
in 2001, I was able to draw some 
fairly solid conclusions on two fronts 
at least, and I believe it is instructive 
to share those conclusions at this 
time. (I will report on the experience 
with the second year of the 
PIPED Act in my upcoming next 
Annual Report.) 


Part Iwo 
REPORT ON 

THE PERSONAL 
INFORMATION 
PROTECTION 
AND ELECTRONIC 
DOCUMENTS ACT 


In particular, there has been considerable 
progress made in interpreting what is and 
what is not personal information, and in 
determining areas in which organizations 
typically seem to be having problems adapting 


to the requirements of the Act. 


THE DEFINITION OF 
PERSONAL INFORMATION: 
BROAD BUT NOT INFINITE 


Section 2 of the PIPED Act defines personal 
information simply as “information about an 
identifiable individual.” That definition 1s 
meant to cover a lot of ground, and the first 
year of the Act served in good measure to 


clarify what ground it does, and does not, cover. 
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Several cases have already given rise to disputes 
over whether the information at issue consti- 
tuted the complainant's personal information. 
Notably, some organizations have been quick 
to claim “ownership” of certain items of infor- 
mation assigned to customers, such as account 
numbers, identification numbers and credit 
cards. The usual argument is that such infor- 
mation should not be considered personal 
because it is not collected from customers. 
Because it is generated internally by the 
organization itself, it is deemed by corporate 


convention to be the organization's property. 


But the section 2 definition was designed to 
sidestep such arguments. It doesn’t say that 
personal information has to originate with or 
be collected from the individual. It doesn’t 
concern itself with who may or may not be 
said to have proprietary interest in the informa- 
tion. It only says that information is personal 
if it is “about” an identifiable individual. 
When it comes right down to it, if an organi- 
zation has put someone’s name on something, 
it is difficult for the organization to argue that 


the thing isn’t “about” that individual. 


The definition is deliberately broad, and in 
my findings I have tended to interpret it as 
broadly as possible. Generally speaking, it does 
not matter who generated the information, or 


how, or who technically “owns” it, or what the 
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corporate convention may be. If it has been 
assigned in an individual’s name, the chances 
are that I will accept it as being his or her 


personal information. 


I am inclined to regard information as per- 
sonal even if there is the smallest potential 

for it to be about an identifiable individual. 

A case in point was one in which a broadcaster 
had attempted — inadvertently, as it turned 
out — to collect NETBIOS information from 
the computer of a Web site visitor. Our inves- 
tigation revealed that, in certain technical 
circumstances such as the complainants, 
NETBIOS information could be used to trace 
the computer's Internet Protocol address, 
which in turn could be used to trace Web sites 
visited by the user or recent passwords to 
secure accounts. On the basis of the potential 
for intrusion into the complainant's privacy, I 
determined that the information at issue was 


personal information for purposes of the 
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But even a deliberately broad definition must 
have limits. In a much-publicized case, I took 
the view that section 2 was not so broad as to 
encompass all information associated with an 
individual. Specifically, I determined that 

physicians’ prescriptions or prescribing patterns 


did not constitute personal information about 
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the physicians themselves. An individual pre- 
scription, I reasoned, is potentially revealing 
about a patient, but it is not in any meaning- 
ful sense about the prescribing physician as an 
individual. Rather, it is about the professional 
process that led to its issuance and should 
therefore be regarded as a work product — 

that is, the tangible result of the physician's 


work activity. 


I judged furthermore that extending the 
definition to include prescriptions and pre- 
scribing patterns would not be consistent 
with the P/PED Act's purpose. Section 3 sets 
out that purpose in terms of balancing the 
individual's right of privacy with the need 

of organizations to collect, use or disclose 
personal information for purposes that a 
reasonable person would consider appropriate. 
I did not think it reasonable to extend the 
definition to prescriptions, since that would 
mean extending it also to other work products 
such as legal opinions or documents written 
in the course of employment. Nor did I think 
it reasonable to extend the definition to 
prescribing patterns, since that would mean 
extending it also to patterns discoverable 

in other types of work products and thus 
would preclude many kinds of legitimate 


consumer reporting. 


SYSTEMIC PROBLEMS 


Privacy code only the beginning 


It is the rare organization nowadays that isnt 
greatly concerned about the privacy rights of 
individuals — on paper, at least. Most corpo- 
rate brochures and Web sites proudly proclaim 
a privacy code, ostensibly in full compliance 
with corporate obligations under the P/PED 
Act. What our complaint investigations are 
showing, however, is that some organizations 
have been less than thorough about putting 


their codes into practice. 


A privacy code is pointless without compre- 
hensive and detailed policies and procedures, 
and these in turn are pointless unless they 
are known and consistently observed and 
applied. The privacy violations that give 

rise to complaints are often attributable to 
problems or defects in an organizations 
information-handling processes or system as a 
whole. Such problems are themselves often 
caused by failure on an organization’ part 

to grasp, or turn its attention to, the practical 
implications of the PIPED Act's principles. 
Sometimes, too, the problems derive from 
unquestioned adherence to traditional prac- 


tices that may no longer be acceptable under 


the Act. 
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The following are a few of the systemic 
problems that our investigations have been 


turning up. 


Not designating a privacy officer 


Principle 4.1 of Schedule 1 to the PIPED Act 
states that an organization must designate one 
or more individuals responsible for the organi- 
zations compliance with the principles of the 
Act. In more than one case, we have found 
that the organization had not yet designated 
such an individual or did not identify any 


person as the responsible privacy officer. 


Not knowing how to handle access 


requests and complaints 


Most organizations seem to understand that 
an individual has a right to gain access to his 
or her personal information (Principle 4.9) 
and to challenge an organization’s compliance 
(Principle 4.10). However, when it comes 
down to receiving an actual access request 

or complaint from an individual, some organ- 
izations are still uncertain how to go about 
processing it. At this point, it is especially 
important to have specific policies and proce- 
dures in place and to follow them thoroughly 


and consistently. 
Keeping information too long or 
not long enough 


Retention is another principle to which some 
organizations need to pay greater heed in the 


form of specific guidelines and procedures. 
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Under Principle 4.5.2, a minimum and a 
maximum retention period should be estab- 
lished for personal information. Information 
that has been used to make a decision about 
an individual must be kept long enough to 
allow the individual access to the information. 
Under Principle 4.5.3, information no longer 
required to fulfil identified purposes should 


be destroyed, erased or made anonymous. 


What we have been finding in some cases is 
that organizations are either destroying 
personal information too soon — that is, before 
the individual has a chance to gain access to 

it — or habitually keeping it for long periods of 
time, far past any need to do so. In one case, 
we learned of an organization that was in the 
habit of keeping the information it collected 
from unsuccessful credit card applicants for 
indefinite periods of time and for no particular 
reason. We even learned of one organization 
that never destroyed any of the personal infor- 
mation it collected, just because it didn’t 


know it was allowed to. 


Not meeting the time limit 


As provided in section 8 of the P/PED Act, I 
have already determined in a number of cases 
that organizations have in effect refused indi- 
viduals’ access requests by having exceeded 
the 30-day time limit for response. In most of 
these cases, however, the failure to meet the 
time limit was due more to a lack of efficient 
procedures for processing the requests than to 


deliberate refusal on the organization's part. 
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Not limiting collection to 


what is necessary 


Is it appropriate for an organization, such as 
an Internet company, to insist on having your 
Social Insurance Number (SIN)? The short 
answer is no; there are very few private sector 
organizations that have a legitimate reason for 
collecting SINs from customers (financial 
institutions sometimes need to collect them 


for revenue reporting purposes, for example). 


But in one noteworthy complaint last year, 
collection of SINs was the central issue. In 
that case, it had been the company’s policy 
for some time to collect SINs as a means of 
avoiding confusion over similar names among 
customers. The company had never really 
considered whether that purpose was a legiti- 
mate one, and front-line staff had come to 
regard the collection as a requirement. In my 
finding, I determined that the collection was 
unnecessary and indiscriminate and that it 
was clearly wrong of the company to require 
applicants to provide their SINs as a condi- 


tion of service. 


This was not the only case where an organiza- 
tion collected more information than it really 
needed to fulfil legitimate purposes. Under 
the PIPED Act, organizations must take pains 
to ensure not only that their purposes for 
collecting personal information are legitimate 


and reasonable ones, but also that both the 


amount and type of information collected are 
necessary to fulfil those purposes. Reviewing 
longstanding and long-unquestioned collec- 
tion policies and practices is the best way for 
an organization to start complying with 


Principle 4.7, limiting collection. 


Not identifyin rpose for whi : 
t identifying purpose for which Complaints by Sector 
January 1,2001 to 
December 31,2001 


Internet 


Service 
Providers 
4 


information collected 


Persons from whom organizations demand 
Other 
information have a right to know why. It is 7 


therefore not enough that purposes be legiti- 


mate. They must also be identified. 
Transportation 
18 


Under Principle 4.2, an organization must 


Telecommunications 
and broadcasting 
28 


identify the purposes for which it collects 
information. Under Principle 4.2.1, the 
purposes must be documented. Under 
Principle 4.2.3, the organization should 
specify the purposes to the individual at or 
before the time of collection. And under 
Principle 4.2.5, it is incumbent on the organi- 
zation to make sure that employees who do 
the collecting can explain the purposes to 


individuals who question the practice. 


Several complaints so far have brought to light 
violations of one or more of these principles. 
Again, in some cases the cause has been a 
slowness to understand that standard ways of 
doing things in the past are not necessarily 


acceptable now that the PIPED Act is with us. 
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Not instituting proper safeguards 


In one case last year, I found that an 
organization’ reliance on a credit cardholder's 
telephone number or year of birth was not 
adequate to prevent unauthorized access to 
the individual’s personal information. In 
another case, involving loss of documents, I 
found that an organization had not taken 
proper measures to protect personal information 
during a transfer of files to another building. 
In yet another, I found that a company was 
not exercising appropriate operational controls 
in a workplace to keep employees’ pay state- 


ments confidential. 


In these and other cases involving actual or 
potential breaches of informational security, 
the central issue was the adequacy of the 
safeguards instituted by certain organizations. 
Principle 4.7 states that personal information 
must be protected by security safeguards 
appropriate to the sensitivity of the information. 
Depending on the nature of the information, 
safeguards may take many forms, ranging 
from physical measures such as locked filing 
cabinets, to organizational measures such as 
security clearances, to technological measures 


such as the use of passwords and encryption. 
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The obligation to protect personal information 
once it has been collected is obviously one 
that some organizations need to start taking 


more seriously. 


Not recognizing that employees have 
privacy rights too 


There is considerable evidence that some 
organizations that are federal works, under- 
takings or businesses, upon reading that the 
PIPED Act applies to the collection, use and 
disclosure of personal information, have 
jumped to the conclusion that it refers only to 
information about their customers. It appears 
not to have occurred to such organizations 
that, in the everyday course of business 
administration, they also handle a great deal 
of personal information about the individuals 


who work for them. 


As a result, some organizations have been 
taken off guard by certain well-founded 
complaints against them under the P/PED 
Act — complaints filed by their own employees, 
past or present. In good part, the violations at 
issue in such complaints originate in an orga- 
nization’s neglect to take its staff into account 


in developing privacy policies and procedures. 
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POSITIVE RESPONSES TO 
MY RECOMMENDATIONS 


Despite the foregoing, I find it encouraging 
that, once systemic problems have been 
pointed out to them, organizations by and 
large have been quick to accept and imple- 


ment the remedies that I have recommended. 


Overall, I am pleased with the progress of the 
PIPED Act so far, and with the efforts that 
organizations are making to bring themselves 


into compliance with it. 


DEFINITIONS OF FINDINGS 
UNDER THE PIPED Acr 


Not well-founded: This means that there 
is no evidence to lead the Privacy 
Commissioner to conclude that the 
organization violated the Personal 
Information Protection and Electronic 
Documents (PIPED) Act. 


Well-founded: This means that the investi- 
gation revealed that the organization failed 


to respect a provision of the PIPED Act. 


Resolved: This means that the organization 
has taken corrective action to remedy the 
situation, or that the complainant is 
satisfied with the results of the inquiries 


made by the Office of the Privacy 


Commissioner of Canada. 


Discontinued: This category applies to inves- 
tigations that are terminated before all the 
allegations have been fully investigated. A 
case may be discontinued for any number 
of reasons, for example, when the com- 
plainant is no longer interested in pursuing 


the matter. 
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Privacy PRACTICES AND REVIEWS 


The Personal Information Protection and 
Electronics Documents (PIPED) Act allows me 
to audit the compliance of private organizations 
if I have “reasonable grounds to believe” that 
the organizations are contravening a provision 
of the Act or are not following a recommenda- 


tion set out in Schedule 1. 


The Privacy Practices and Reviews Branch of 
my Office will conduct compliance reviews 
and audits under section 18 of the P/PED 
Act, following accepted standard audit objec- 
tives and criteria. As | mentioned in my previ- 
ous Annual Report to Parliament, | have not 
yet initiated any such audit because no matter 
has been brought to my attention that meets 


the reasonable grounds test. 
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IN THE CourRTS 


Under section 14 of the Personal Information 
Protection and Electronic Documents (PIPED) 
Act, an individual complainant has a right, 
following my investigation, to apply to the 
Federal Court of Canada for a hearing in 
respect of any matter on which the complaint 
was made or that is referred to in the 
Commissioner’s report. [hese matters must 
be among those in the Schedule clauses and 
sections of the Act listed in section 14. I may 
also apply to the Court in respect of any 
complaint I have initiated. From the time 
the Act came into force on January 1, 2001, 


five applications have been filed in the 
Federal Court. 


Section 15 of the PIPED Act allows me to 
apply to appear in Federal Court. I may, with 
the consent of the complainant, apply directly 
to the Court for a hearing in respect of any 
matter covered by section 14; appear before 
the Court on behalf of any complainant who 
has applied under section 14; or, with the 
leave of the Court, appear as a party to any 


section 14 hearing. 
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The following is not an exhaustive list of 
applications in the courts but a listing of 


matters of particular interest. 


Mathew Englander v. Telus Communications Inc. 


This is the first application to be filed in the 
Federal Court under section 14 of the PIPED 
Act. Mr. Englander argues that Telus uses 
and discloses customers’ names, addresses 
and telephone numbers in its white pages 
directories and otherwise, without customers 
knowledge and consent, and inappropriately 
charges customers for choosing to have their 
telephone number “non-published.” He 
claims that these actions by Telus contravene 
subsections 5(1) and (3) of the Act, as well as 


several clauses of Schedule 1 of the Act. 


Status 


A hearing date has not been set. 


Ronald G. Maheu v. IMS Health Canada 
and the Privacy Commissioner of Canada 


Ronald Maheu applied for a hearing in the 
Federal Court of Canada, arguing that IMS 
Health Canada improperly discloses personal 
information by selling data on physicians 


prescribing patterns without their consent. 


Status 

In his application, Mr. Maheu had asked the 
Court to review my “decision” in this case. 

I filed a motion objecting to the manner in 
which Mr. Maheu had framed his application, 
arguing that under the PIPED Act it is the 
responsibility of the organization concerned 
(here, IMS), and not the Privacy Commis- 
sioner, to justify why it should not have to 
modify its practices to comply with the Act. 
On February 12, 2002 the Federal Court 
ordered Mr. Maheu to file an amended 
Notice of Application removing allegations 
and requested orders against my Office, and 
ordered that his application be directed solely 
against IMS Health Canada. I was also 
eranted leave under section 15(c) of the Act to 
appear as a party respondent in support of my 
finding in this proceeding. On May 14, 2002, 
in response to a motion brought by IMS, the 
Federal Court ordered Mr. Maheu to post 
security for costs. Mr. Maheu has successfully 


appealed this order. 
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COMMUNICATIONS AND 
PuBLIC EDUCATION 


The PIPED Act has given me and my Office 

a greater responsibility, an expanded role and 
a strengthened legislative mandate to educate 
Canadians and organizations about issues 


surrounding personal privacy. 


‘To meet these new responsibilities and in 
preparation for the communications activities 
ahead, my Office’s communications capabilities 
were expanded. Since then, we have been 
proactively involved in a variety of activities 

to raise public awareness and understanding 
of issues that could potentially threaten 
Canadians’ privacy, to inform Canadians of 
their legislated privacy protections and to 
remind private sector organizations of their 


responsibilities under the new legislation. 


In view of my mandated responsibilities 
under section 24 of the Act, I am gratified by 
the increased awareness of privacy rights and 
privacy issues that these activities appear to 


be generating. 
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Speaking engagements 

Conferences and other special events, in 
Canada and around the world, have provided 
me with a unique opportunity to meet 
Canadians and to raise awareness of privacy 
issues among diverse audiences and settings — 
professional and industry associations, non- 
profit and advocacy groups, universities and 


public events. 


From January 1, 2001 to March 31, 2002, I 
gave a total of 55 speeches; another 35 were 
delivered by other senior staff of this Office. 
At these events, I spoke out about issues such 
as workplace privacy, genetic privacy, the 
application of the PIPED Act and its implica- 
tions for businesses, the Government On-Line 
initiative, my grave concerns regarding video 
surveillance by public authorities in public 
places, and the need to balance privacy rights 
with security objectives following the terrorist 


attacks in the United States. 


At international conferences, I had the 
opportunity to share my perspective on the 
Canadian experience with officials and 


privacy advocates from other countries. 
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Media relations 


The media’s appetite for news relating to pri- 
vacy has continued to increase steadily. Our 
analysis of news coverage indicates a growing 
interest in the issues and in awareness of this 
Office. The number of calls from journalists, 
which currently averages approximately 

100 per month, continues to increase. From 
January 1, 2001 to March 31, 2002, I eranted 


more than 270 interviews to reporters. 


In addition to responding to the demand 

for more information and comment about 
personal privacy and Canadians’ rights under 
federal privacy laws, my Office has taken a 
number of steps to raise awareness of various 
issues through the media. During this period, 
we disseminated more than 25 news releases 
and media advisories, participated in a number 
of editorial board meetings of daily newspapers 
across the country, contributed articles and 
other information to several publications, and 
provided media relations support for confer- 


ences, public meetings and other special events. 


Public education materials 


In 2001, my Office produced two guides in 
anticipation of a demand from Canadians 
and businesses for more information about 
the PIPED Act. Our Citizens Guide tells 
Canadians about their rights under the new 
law. The Business Guide informs organizations 
of their responsibilities under the law, so they 


can learn how to comply with it. 


The Office receives requests for these guides 
on a daily basis and the demand is increasing. 
Not only are these materials sent to individuals 
upon request, they are also distributed at 
conferences and accessed in electronic format 
by visitors to our Web site. During this 
period, more than 24,000 of the guides 


were distributed. 


In addition to the Citizens’ Guide and the 
Business Guide, this Office has produced and 
distributed other educational and promo- 
tional materials, including bookmarks, 
posters, fact sheets, annual reports and copies 


of both federal privacy laws. 


Plans are currently underway to identify 
other suitable locations where the guides 
and the other information could be offered 


to Canadians. 
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Advertising 


Advertising is another important tool my 
Office has used to raise public awareness and 


understanding of privacy issues. 


In 2001, we placed advertisements in daily 
and community newspapers. The ads pro- 
vided information on the new legislation and 


its application to federally regulated businesses. 


In 2002, we initiated another national adver- 
tising campaign. Radio spots were produced 
in English and French, and were aired on the 
top stations in every market across the country. 
These radio ads emphasized Canadians’ rights 
under the new law and my Office’s role in 


helping to protect those rights. 


Both advertising campaigns reached millions 
of Canadians and resulted in nearly doubling 


the number of inquiries to this Office. 
Public inquiries 


The Communications and Policy Branch also 
responds to thousands of inquiries from the 
general public who contact my Office for 
advice and assistance on all sorts of privacy- 


related matters. 
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Web site 


In the spirit of openness and transparency, 
every effort is made to ensure that new and 
useful information is posted on my Office’s 
Web site on an ongoing basis and in a timely 
manner. New elements such as speeches, news 
releases, fact sheets, selected reports and case 
summaries are always being added to keep the 


site current and interesting. 


Over the past year, because organizations 
wanted a better understanding of how the 
PIPED Act was being applied, a new section 
entitled “Commissioner’s Findings” was added 
to the site. Here, summaries of my findings 
are posted in an effort to provide guidance to 


businesses and the legal community. 


In 2001, the Web site was redesigned and the 
number of visits to the Web site has increased 
steadily, with a surge that resulted in almost 
double the visitors after October 2001. Over 


the period, the site averaged approximately 
16,000 hits per month. 
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Communications Activities 
January 1,2001 to March 31, 2002 


Activity Number 
Speeches delivered by Privacy Commissioner a5 
Speeches delivered by senior staff 35 
News releases oS 
Media interviews 270 
Distribution of materials 34,036 

Business Guides 14,170 

Citizens’ Guides 10,666 

Other (Annual Reports, bookmarks, fact sheets, Acts, etc.) 9,200 
Average number of visits to Web site per month 16,079 
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Inquiries by type under Privacy Act 
April 1, 2001 to March 31, 2002 


Subject Number 
Adoption/genealogy ey) 
Access to personal information * 504 
Census 297, 
Collection, use and disclosure * 224 
Consent issues * 25 
Corrections * 18 
Criminal records, pardons 203 
E-311 Travel Declaration Form ** 26 
Firearms 76 
Law enforcement * 60 
Medical records ** 98 
No jurisdiction (federal) 983 
Office of the Privacy Commissioner of Canada * 111 
Personal health information * 49 
Privacy Act, interpretation and process 6,988 
Publication requests 189 
Redirect — external 3,240 
Social Insurance Numbers 410 
Video surveillance * 50 
Workplace surveillance * Ig 
Calls from Members of Parliament 31 
Other 642 
Total 14,272 


“ These categories were compiled from January to March 2002 only. 
** ‘These categories were compiled from April to December 2001 only. 
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Inquiries by type under the PIPED Act 
January 1, 2001 to December 31, 2001 


Subject Number 
Criminal records oll 
Drug testing 3 
Encryption 7 
Financial institutions 1,609 
Identity theft 38 
Information request 2,744 
Interception/monitoring 154 
PIPED Act, interpretation and process 2,154 
Jurisdiction 2,403 
Marketing 462 
Medical records 144 
Publication requests 679 
Social Insurance Number 1,902 
Telecommunications 827 
‘Transportation 12 
Calls from Members of Parliament i 
Other 388 
Total 13,401 
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N ORDER TO MANAGE THE 

implementation of the P/PED 

Act, and because of an increased 
mandate under the Act, my Office 


has experienced an increase in 


resources, both human and financial. 


On April 1, 2001, my Office's 
budget was increased to 

$11.1 million from $8.7 million 
the previous year, and will be 
maintained for the next fiscal year 
to support the following: 


w An increase in communications activities, 


inquiries and complaints; 


m An increase in the number of investigators, 
auditors and Privacy Impact Assessment 
officers to handle issues in relation to both 


federal privacy laws; 


Part [THREE 
CORPORATE 
SERVICES 


= An extension of our hours of operation — 
now from 9 a.m. to 5 p.m. in all time zones 


across Canada; 


m The establishment of a solid management 
framework which incorporates both the 
investigative and audit functions of the 


Office; and 


m The establishment on April 1, 2002 of a 
dedicated corporate services branch for this 
Office, for information technology, human 
resources, finance and administration pur- 
poses (previously, corporate services were 
shared with the Office of the Information 


Commissioner). 


In preparation for the full implementation of 
the PIPED Act on January 1, 2004, a finan- 
cial framework for funding will be presented to 
the Treasury Board Secretariat to substantiate 


future expenditures. 
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Resources 
April 1, 2001 to March 31, 2002 


FTEs Expenditure Totals Percentage of Total 
Privacy 36) $ 9,435,901 82% 
Corporate Services 15 % 2,021,867 18% 
Total 108 $11,457,768 100% 


Note: FTE stands for “full-time equivalent” or full-time staff as of March 2002. 


Detailed Expenditures 
April 1, 2001 to March 31, 2002 


Part THREE ~~’ CORPORATE SERVICES 


Privacy Corporate Services Total 
Salaries $5,1015779 $1,078,633 $ 6,180,412 
Employee Benefits Program 1,172,850 167,150 1,340,000 
Transportation and Communication 446,109 132,985 579,094 
Information 15566;375 7,502 ee yon) 
Professional Services 656,962 223,749 880,711 
Rentals 11,412 20,975 525335 
Repairs and Maintenance 50,453 195920 7O;373 
Materials and Supplies 99,053 40,494 139,547 
Acquisition of Machinery 
and Equipment 298,673 330,147 628,820 
Other Subsidies and Payments 325235) 364 O20? 
Total $9,435,901 $2,021,867 $11,457,768 


Notes: 


‘Total expenditure figures are consistent with public accounts. 


2 Expenditures for Corporate Services were allocated on a 50/50 basis and shared between 


the Offices of the Privacy Commissioner of Canada and the Information Commissioner 


of Canada. 


3 Effective April 1, 2002, Corporate Services is part of this Office and services are no longer 


shared with the Office of the Information Commissioner of Canada. 
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CORPORATE STRUCTURE 


Privacy Commissioner 


Executive Legal Communications Corporate 
Director Services and Policy Services 


Strategic Research 


Investigations 
d and Analysis 


Privacy, Practices 


; Communications 
and Reviews 


Inquiries 


m Effective April 1, 2002, Corporate Services is part of this Office and resources are no longer shared with the Office of 


the Information Commissioner of Canada. 


Was 
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